RE: [Radiusplugin-users] OpenVPN Server Stalls on Radius Server Failure

[Dustin Wilhoit]

The usernames I am using are in the following format "address@hidden".

Dustin Wilhoit
Network Engineer
Cybera Inc.


-----Original Message-----
From: William Cooley [mailto:address@hidden 
Sent: Wednesday, March 31, 2010 3:26 PM
To: Dustin Wilhoit
Cc: address@hidden
Subject: Re: [Radiusplugin-users] OpenVPN Server Stalls on Radius Server Failure

Any chance you have usernames with spaces?
Actually I think if a user accidentally adds a space in the username 
(even after the username) that will crash the plugin. I think that is 
one of the bugs with 2.0c.
But as Ralf said without a higher log level it's hard to tell what the 
problem is.

On 3/31/2010 9:49 PM, Dustin Wilhoit wrote:
> I will get some detailed logs of the failure but it may be a week or so 
> before I'll be able to get the time to lab it all up.  My previous logs show 
> almost nothing on the default logging level and I can't really play around 
> with them since they are in production use now.
>
> I am not sure how long it takes after the radius failure for the OpenVPN 
> service to seize up but I think it's at least a few minutes if not more.  
> Perhaps it also needs clients trying to connect to push it over the edge?  
> Again, I'll try to get you more details as soon as I can.
>
> Dustin Wilhoit
> Network Engineer
> Cybera Inc.
>
> -----Original Message-----
> From: address@hidden [mailto:address@hidden On Behalf Of Ralf Lübben
> Sent: Wednesday, March 31, 2010 2:42 PM
> To: address@hidden
> Subject: Re: [Radiusplugin-users] OpenVPN Server Stalls on Radius Server 
> Failure
>
> I have just tested the plugin (2.0c) if the radius server is not available or
> switched off during users are connected and with random connects and
> disconnects. I could not reprocuce the error.
>
> It would be helpfull if someone can provide some log files after the server 
> has
> crashed.
>
> Ralf
>
> Am Mittwoch, 31. März 2010 12:06:40 schrieb Eike Lohmann:
>    
>> I have made the same experience in the past, but have no further
>> information on this.
>>
>> Regards, Eike
>>
>> Am 27.03.2010 17:51, schrieb Ralf Lübben:
>>      
>>> Hi,
>>>
>>> if the problem occurs if all RADIUS servers are down it is probably
>>> related to the plugin, but without a log file it is only guessing.
>>>
>>> Please use a OpenVPN verbosity level equal to 5, than you will get
>>> additional output from the plugin in the log files. Maybe this will give
>>> a hint.
>>>
>>> You can also try the beta version of the plugin, a lot of issues where
>>> fixed in the last days.
>>>
>>> Ralf
>>>
>>> Am Samstag, 27. März 2010 17:37:43 schrieb Dustin Wilhoit:
>>>        
>>>> I work for a company that is using OpenVPN for remote site connectivity
>>>> and currently we are in the process of migrating from using the PAM
>>>> radius plugin to using radiusplugin on a new set of servers.  Love the
>>>> ability to use radius attributes and accounting.
>>>>
>>>> I have run into a reproducible issue that cause the openvpn processes to
>>>> go offline(lockup).  I currently can't do more troubleshooting on it
>>>> till I get a lab mock-up (since all we have currently is in production)
>>>> of everything up but recently we've had some radius server failures
>>>> where they go offline for a bit (all of them) and it seems OpenVPN
>>>> stalls and never comes back on it's own, restarting the processes does
>>>> work.
>>>>
>>>> I wanted to ask you if you've seen behavior like this and is this
>>>> intended or is there perhaps a bug somewhere in OpenVPN or radiusplugin
>>>> possibly causing this issue?
>>>>
>>>> The failure occurs when all the radius servers go offline, I have not
>>>> seen the issue if one of the servers remains online and available.
>>>>
>>>> We are running RadiusPlugin 2.0c and OpenVPN 2.1rc11.
>>>>          
>>> _______________________________________________
>>> Radiusplugin-users mailing list
>>> address@hidden
>>> http://lists.nongnu.org/mailman/listinfo/radiusplugin-users
>>>        
>> _______________________________________________
>> Radiusplugin-users mailing list
>> address@hidden
>> http://lists.nongnu.org/mailman/listinfo/radiusplugin-users
>>
>>      
>
> _______________________________________________
> Radiusplugin-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/radiusplugin-users
>
>
> _______________________________________________
> Radiusplugin-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/radiusplugin-users
>