Re: [Radiusplugin-users] OpenVPN & Radius Plugin

[Ralf Lübben]

Hi,

is it possible to send me your whole OpenVPN logfile?

Two further ideas:

- You use the OpenVPN "float" option, do your clients change their IP during a 
connection? This could cause a problem, because the plugin uses the IP as an 
identifier.

- Can you set "useauthcontrolfile=true" in your plugin config (if you use 
OpenVPN 2.1), it will increase the performance and also change the way users 
are handled. The auth control files are written by default to the OpenVPN 
configuration directory, the OpenVPN option "tmp-dir" changes the default 
directory, the plugin needs write permissions to this directory.

I also uploaded a new version to the CVS, it fixes a problem if  "username-as-
common-name" is used and also a common-name is available.

Ralf





Am Samstag, 13. November 2010, um 14:20:38 schrieb Farrukh Ahmed:
> Dear Ralf,
> 
> I could not fine anything else then this. Also i have noticed that new
> version crash twice or thrice in a day.
> 
> Fri Nov 12 05:58:37 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_6zc71njb, 86.74.3.244:57016,123747316,413847323,Fri Nov 12 03:57:43
> 2010FFri Nov 12 05:58:37 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_ib4qq4vr,
> 78.112.38.80:55704,613744961,66499271,Fri Nov 12 03:57:56 2010Fri Nov 12
> 05:58:37 2010 us=110559 GET INST BY REAL: :54872 [failed]
> Fri Nov 12 06:15:56 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_6zc71njb, 86.74.3.244:57016,154024333,477998823,Fri Nov 12 03:57:43
> 2010Fri Nov 12 06:15:56 2010 us=116997 cmi_hjnno8ja/88.168.77.215:3101 GET
> INST BY VIRT: 192.168.0.1 [failed]
> Fri Nov 12 07:51:21 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 08:18:17 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 08:18:17 2010 us=266803 GET INST BY VIRT: 172.16.0.12 [failed]
> Fri Nov 12 08:21:55 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 08:21:55 2010 us=321146 GET INST BY VIRT: 172.16.0.177 [failed
> Fri Nov 12 09:57:23 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 09:57:23 2010 us=370322 GET INST BY VIRT: 172.16.0.180 [failed]
> Fri Nov 12 11:09:50 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 11:18:39 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 11:21:13 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 11:21:13 2010 us=139122 GET INST BY VIRT: 172.16.0.177 [failed]Fri Nov 12
> 11:21:13 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: cmi_peaws4ss,
> 88.177.114.41:32768,1709753211,499736272,Fri Nov 12 04:00:54 2010
> Fri Nov 12 11:31:10 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_yok5j34k, 93.30.218.141:1077,5322348,75385209,Fri Nov 12 06:15:21
> 2010Fri Nov 12 11:31:10 2010 us=297962 GET INST BY VIRT: 172.16.0.195
> [failed]
> Fri Nov 12 11:36:03 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_10cahm50, 90.37.34.141:51345,272844688,2202928137,Fri Nov 12 09:10:46
> 2010Fri Nov 12 11:36:03 2010 us=78435 cmi_9zdg3msm/89.81.118.250:64702 GET
> INST BY VIRT: 192.168.1.6 [failed]
> Fri Nov 12 12:21:10 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 12:21:10 2010 us=124615 GET INST BY VIRT: 172.16.0.218 [failed]
> Fri Nov 12 13:28:51 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_xaiit5or, 82.229.92.166:50026,870322249,8233589405,Fri Nov 12 08:09:40
> 2010Fri Nov 12 13:28:51 2010 us=167161 cmi_9zdg3msm/89.81.118.250:64702
> GET INST BY VIRT: 192.168.1.6 [failed]
> Fri Nov 12 14:16:45 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_c9bc477k, 90.30.32.18:1114,478350020,1701745023,Fri Nov 12 07:35:12
> 2010Fri Nov 12 14:16:45 2010 us=66157 cmi_9zdg3msm/89.81.118.250:64702 GET
> INST BY VIRT: 192.168.1.6 [failed]
> Fri Nov 12 15:14:41 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 15:14:41 2010 us=223735 GET INST BY VIRT: 172.16.0.195 [failed]
> Fri Nov 12 15:39:46 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 15:51:15 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 15:51:43 2010 Fri Nov 12 15:51:43 2010 Error: RADIUS-PLUGIN:
> BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 15:57:36 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 15:57:36 2010 us=189352 GET INST BY VIRT: 172.16.0.195 [failed]
> Fri Nov 12 16:11:18 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_h7t23s6p, 77.192.109.96:16155,2138323188,3732386983,Fri Nov 12
> 03:57:44 2010Fri Nov 12 16:11:18 2010 us=183788 GET INST BY REAL:
> 82.229.92.166:62426 [failed] Fri Nov 12 16:12:18 2010 TEST: RADIUS-PLUGIN:
> BACKGROUND ACCT: Fri Nov 12 16:12:18 2010 us=157729 GET INST BY VIRT:
> 172.16.0.184 [failed]
> Fri Nov 12 16:15:50 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 16:17:12 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 16:17:12 2010 us=64180 GET INST BY VIRT: 172.16.0.176 [failed]
> Fri Nov 12 16:21:52 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 16:25:46 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 16:25:46 2010 us=139598 GET INST BY VIRT: 172.16.0.176 [faileFri Nov 12
> 16:25:46 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: cmi_hjnno8ja,
> 88.168.77.215:1049,300848936,3063332979,Fri Nov 12 14:25:22 2010
> Fri Nov 12 17:02:23 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 17:02:23 2010 us=342576 GET INST BY VIRT: 172.16.0.176 [failed
> Fri Nov 12 17:09:58 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error receiving
> auth confirmation from background process.Fri Nov 12 17:09:58 2010 Error:
> RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 17:22:41 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 17:22:41 2010 us=90287 GET INST BY VIRT: 172.16.0.176 [failed]
> Fri Nov 12 17:29:57 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> ri Nov 12 17:30:31 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_mt1w1523,109.122.146.90:49153,5240876,132421387,Fri
> Nov 12 15:53:33 2010Fri Nov 12 17:54:37 2010 us=264188 GET INST BY VIRT:
> 172.16.0.177 [failed]
> Fri Nov 12 17:58:18 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 17:58:18 2010 us=26754 GET INST BY REAL: :64506 [failed]
> Fri Nov 12 18:10:15 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 18:10:15 2010 us=3572 GET INST BY REAL: :16155 [failed]
> Fri Nov 12 18:12:17 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error receiving
> auth confirmation from background process.Fri Nov 12 18:12:17 2010 Error:
> RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> ri Nov 12 18:12:49 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 18:13:05 2010 Fri Nov 12 18:13:05 2010 Error: RADIUS-PLUGIN:
> BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 18:13:47 2010 RADIUS-PLUGIN: FOREGROUNDError: RADIUS-PLUGIN:
> BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 18:13:54 2010 RADIUS-PLUGIN: FOREGROUNDError: RADIUS-PLUGIN:
> BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 18:14:31 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 18:18:20 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 18:18:29 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error receiving
> auth confirmation from background process.Fri Nov 12 18:18:29 2010 Error:
> RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 18:18:36 2010 Fri Nov 12 18:18:36 2010 Error: RADIUS-PLUGIN:
> BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 18:20:17 2010 Fri Nov 12 18:20:17 2010 Error: RADIUS-PLUGIN:
> BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 18:20:21 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 18:20:30 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 18:30:37 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 18:30:37 2010 us=213230 GET INST BY VIRT: 172.16.0.240 [failed]
> Fri Nov 12 19:01:38 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error receiving
> auth confirmation from background process.Fri Nov 12 19:01:38 2010 Error:
> RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> ri Nov 12 19:01:43 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 19:03:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 19:03:43 2010 us=203281 GET INST BY REAL: :50762 [failed]
> Fri Nov 12 19:05:59 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error receiving
> auth confirmation from background process.Fri Nov 12 19:05:59 2010 Error:
> RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 19:06:13 2010 Fri Nov 12 19:06:13 2010 Error: RADIUS-PLUGIN:
> BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 19:07:18 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 19:09:20 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 19:09:25 2010Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 19:09:33 2010 Fri Nov 12 19:09:33 2010 Error: RADIUS-PLUGIN:
> BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 19:11:28 2010 Fri Nov 12 19:11:28 2010 Error: RADIUS-PLUGIN:
> BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 19:11:33 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 19:11:38 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 19:28:12 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_59sp6i14, 79.88.128.151:1577,643289968,1064558741,Fri Nov 12 11:45:36
> 2010FFri Nov 12 19:28:12 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_yok5j34k,
> 93.30.218.141:1077,16667279,183154955,Fri Nov 12 06:15:21 2010Fri Nov 12
> 19:28:12 2010 us=460627 GET INST BY REAL: :64603 [failed]
> Fri Nov 12 19:36:45 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_yok5j34k, 93.30.218.141:1077,16684427,183165847,Fri Nov 12 06:15:21
> 2010Fri Nov 12 19:36:45 2010 us=398726 cmi_9zdg3msm/89.81.118.250:61743
> GET INST BY VIRT: 192.168.1.6 [failed]
> ri Nov 12 19:40:10 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> failed!.
> Fri Nov 12 19:40:20 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error receiving
> auth confirmation from background process.Fri Nov 12 19:40:20 2010 Error:
> RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> Fri Nov 12 20:36:03 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov 12
> 20:36:03 2010 us=128572 GET INST BY VIRT: 172.16.0.171 [failed]
> Fri Nov 12 20:46:08 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> cmi_6pbpeq8i, 84.100.40.241:64603,426589122,805635309,Fri Nov 12 18:10:07
> 2010Fri Nov 12 20:46:08 2010 us=102021 cmi_1gc8t63j/82.230.129.133:1545
> GET INST BY VIRT: 82.230.129.133 [failed]
> 
> Best Regards.
> 
> On Sat, Nov 13, 2010 at 3:45 PM, Ralf Lübben <address@hidden> wrote:
> > Hi,
> > 
> > can you check the log files before these repeating messages:
> > 
> > Fri Nov 12 19:10:43 2010 RADIUS-PLUGIN: BACKGROUND-ACCT: Scheduler:
> > Update for User ...
> > Fri Nov 12 19:10:43 2010 RADIUS-PLUGIN: BACKGROUND ACCT: Scheduler: Read
> > Statusfile.
> > Fri Nov 12 19:10:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: OpenVPN
> > CLIENT LIST
> > Fri Nov 12 19:10:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> > Updated,Fri Nov 12 18:18:10 2010
> > Fri Nov 12 19:10:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Common
> > Name,Real Address,Bytes Received,Bytes Sent,Connected Since
> > Fri Nov 12 19:10:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: ...
> > 
> > I would have  expected a messages like "RADIUS-PLUGIN: New failed ..." or
> > something else.
> > 
> > Some background information:
> > The plugin always creates two additional processes, one for accounting,
> > one for authentication. If everything is fine you should always see
> > three OpenVPN
> > processes.
> > 
> > The process you analyse with pstack is the accouting process (I guess),
> > which
> > still produces the output messages. This process still works, the two
> > others
> > are finished/crashes, so the last messages are of interest which don't
> > include
> > the "ACCT" tag. These message should give a hint what happened to the
> > other processes.
> > 
> > 
> > Regards,
> > Ralf