radiusplugin-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Radiusplugin-users] OpenVPN & Radius Plugin


From: Ralf Lübben
Subject: Re: [Radiusplugin-users] OpenVPN & Radius Plugin
Date: Mon, 15 Nov 2010 08:18:44 +0100
User-agent: KMail/1.13.2 (Linux/2.6.32-25-generic; KDE/4.4.2; i686; ; )

Hi,

on my site it is running since 20 hours without problems, also with two users 
connecting randomly, where one users don't pass the authentication. One 
difference is that I use Ubuntu i386 instead of a 64bit OS.

Can you send me your log files again? The most interesting part is where 
everything seems to be o.k. (users can login) and where only the accounting 
works. This part of the logfile should be continuous, to locate where the 
plugin exits.

Regards,
Ralf
  



Am Montag, 15. November 2010, um 04:34:11 schrieb Farrukh Ahmed:
> Dear Ralf,
> 
> I did that and i found that after using lastest CVS code i get openvpn
> crashed every 1 hour.
> 
> Best Regards.
> 
> On Sun, Nov 14, 2010 at 7:27 PM, Farrukh Ahmed <address@hidden> wrote:
> > Dear Ralf,
> > 
> > I have done your mentioned changes. I can not send you over whole openvpn
> > log file because its size is in GBs :)
> > 
> > Best Regards.
> > 
> > On Sun, Nov 14, 2010 at 4:35 PM, Ralf Lübben <address@hidden> wrote:
> >> Hi,
> >> 
> >> is it possible to send me your whole OpenVPN logfile?
> >> 
> >> Two further ideas:
> >> 
> >> - You use the OpenVPN "float" option, do your clients change their IP
> >> during a
> >> connection? This could cause a problem, because the plugin uses the IP
> >> as an
> >> identifier.
> >> 
> >> - Can you set "useauthcontrolfile=true" in your plugin config (if you
> >> use OpenVPN 2.1), it will increase the performance and also change the
> >> way users
> >> are handled. The auth control files are written by default to the
> >> OpenVPN configuration directory, the OpenVPN option "tmp-dir" changes
> >> the default directory, the plugin needs write permissions to this
> >> directory.
> >> 
> >> I also uploaded a new version to the CVS, it fixes a problem if
> >> 
> >>  "username-as-
> >> 
> >> common-name" is used and also a common-name is available.
> >> 
> >> Ralf
> >> 
> >> Am Samstag, 13. November 2010, um 14:20:38 schrieb Farrukh Ahmed:
> >> > Dear Ralf,
> >> > 
> >> > I could not fine anything else then this. Also i have noticed that new
> >> > version crash twice or thrice in a day.
> >> > 
> >> > Fri Nov 12 05:58:37 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_6zc71njb, 86.74.3.244:57016,123747316,413847323,Fri Nov 12
> >> > 03:57:43 2010FFri Nov 12 05:58:37 2010 TEST: RADIUS-PLUGIN:
> >> > BACKGROUND ACCT: cmi_ib4qq4vr,
> >> > 78.112.38.80:55704,613744961,66499271,Fri Nov 12 03:57:56 2010Fri Nov
> >> 
> >> 12
> >> 
> >> > 05:58:37 2010 us=110559 GET INST BY REAL: :54872 [failed]
> >> > Fri Nov 12 06:15:56 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_6zc71njb, 86.74.3.244:57016,154024333,477998823,Fri Nov 12
> >> > 03:57:43 2010Fri Nov 12 06:15:56 2010 us=116997
> >> > cmi_hjnno8ja/88.168.77.215:3101GET INST BY VIRT: 192.168.0.1 [failed]
> >> > Fri Nov 12 07:51:21 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 08:18:17 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 08:18:17 2010 us=266803 GET INST BY VIRT: 172.16.0.12 [failed]
> >> > Fri Nov 12 08:21:55 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 08:21:55 2010 us=321146 GET INST BY VIRT: 172.16.0.177 [failed
> >> > Fri Nov 12 09:57:23 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 09:57:23 2010 us=370322 GET INST BY VIRT: 172.16.0.180 [failed]
> >> > Fri Nov 12 11:09:50 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 11:18:39 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 11:21:13 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 11:21:13 2010 us=139122 GET INST BY VIRT: 172.16.0.177 [failed]Fri Nov
> >> 
> >> 12
> >> 
> >> > 11:21:13 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: cmi_peaws4ss,
> >> > 88.177.114.41:32768,1709753211,499736272,Fri Nov 12 04:00:54 2010
> >> > Fri Nov 12 11:31:10 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_yok5j34k, 93.30.218.141:1077,5322348,75385209,Fri Nov 12 06:15:21
> >> > 2010Fri Nov 12 11:31:10 2010 us=297962 GET INST BY VIRT: 172.16.0.195
> >> > [failed]
> >> > Fri Nov 12 11:36:03 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_10cahm50, 90.37.34.141:51345,272844688,2202928137,Fri Nov 12
> >> 
> >> 09:10:46
> >> 
> >> > 2010Fri Nov 12 11:36:03 2010 us=78435
> >> > cmi_9zdg3msm/89.81.118.250:64702GET INST BY VIRT: 192.168.1.6
> >> > [failed]
> >> > Fri Nov 12 12:21:10 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 12:21:10 2010 us=124615 GET INST BY VIRT: 172.16.0.218 [failed]
> >> > Fri Nov 12 13:28:51 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_xaiit5or, 82.229.92.166:50026,870322249,8233589405,Fri Nov 12
> >> 
> >> 08:09:40
> >> 
> >> > 2010Fri Nov 12 13:28:51 2010 us=167161
> >> > cmi_9zdg3msm/89.81.118.250:64702 GET INST BY VIRT: 192.168.1.6
> >> > [failed]
> >> > Fri Nov 12 14:16:45 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_c9bc477k, 90.30.32.18:1114,478350020,1701745023,Fri Nov 12
> >> > 07:35:12 2010Fri Nov 12 14:16:45 2010 us=66157
> >> > cmi_9zdg3msm/89.81.118.250:64702GET INST BY VIRT: 192.168.1.6
> >> > [failed]
> >> > Fri Nov 12 15:14:41 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 15:14:41 2010 us=223735 GET INST BY VIRT: 172.16.0.195 [failed]
> >> > Fri Nov 12 15:39:46 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 15:51:15 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 15:51:43 2010 Fri Nov 12 15:51:43 2010 Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 15:57:36 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 15:57:36 2010 us=189352 GET INST BY VIRT: 172.16.0.195 [failed]
> >> > Fri Nov 12 16:11:18 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_h7t23s6p, 77.192.109.96:16155,2138323188,3732386983,Fri Nov 12
> >> > 03:57:44 2010Fri Nov 12 16:11:18 2010 us=183788 GET INST BY REAL:
> >> 
> >> > 82.229.92.166:62426 [failed] Fri Nov 12 16:12:18 2010 TEST:
> >> RADIUS-PLUGIN:
> >> > BACKGROUND ACCT: Fri Nov 12 16:12:18 2010 us=157729 GET INST BY VIRT:
> >> > 172.16.0.184 [failed]
> >> > Fri Nov 12 16:15:50 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 16:17:12 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 16:17:12 2010 us=64180 GET INST BY VIRT: 172.16.0.176 [failed]
> >> > Fri Nov 12 16:21:52 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 16:25:46 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 16:25:46 2010 us=139598 GET INST BY VIRT: 172.16.0.176 [faileFri Nov
> >> > 12 16:25:46 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: cmi_hjnno8ja,
> >> > 88.168.77.215:1049,300848936,3063332979,Fri Nov 12 14:25:22 2010 Fri
> >> > Nov 12 17:02:23 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 17:02:23 2010 us=342576 GET INST BY VIRT: 172.16.0.176 [failed
> >> > Fri Nov 12 17:09:58 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error
> >> 
> >> receiving
> >> 
> >> > auth confirmation from background process.Fri Nov 12 17:09:58 2010
> >> 
> >> Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 17:22:41 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 17:22:41 2010 us=90287 GET INST BY VIRT: 172.16.0.176 [failed]
> >> > Fri Nov 12 17:29:57 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > ri Nov 12 17:30:31 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_mt1w1523,109.122.146.90:49153,5240876,132421387,Fri
> >> > Nov 12 15:53:33 2010Fri Nov 12 17:54:37 2010 us=264188 GET INST BY
> >> > VIRT: 172.16.0.177 [failed]
> >> > Fri Nov 12 17:58:18 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 17:58:18 2010 us=26754 GET INST BY REAL: :64506 [failed]
> >> > Fri Nov 12 18:10:15 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 18:10:15 2010 us=3572 GET INST BY REAL: :16155 [failed]
> >> > Fri Nov 12 18:12:17 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error
> >> 
> >> receiving
> >> 
> >> > auth confirmation from background process.Fri Nov 12 18:12:17 2010
> >> 
> >> Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > ri Nov 12 18:12:49 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 18:13:05 2010 Fri Nov 12 18:13:05 2010 Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 18:13:47 2010 RADIUS-PLUGIN: FOREGROUNDError:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 18:13:54 2010 RADIUS-PLUGIN: FOREGROUNDError:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 18:14:31 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 18:18:20 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 18:18:29 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error
> >> 
> >> receiving
> >> 
> >> > auth confirmation from background process.Fri Nov 12 18:18:29 2010
> >> 
> >> Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 18:18:36 2010 Fri Nov 12 18:18:36 2010 Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 18:20:17 2010 Fri Nov 12 18:20:17 2010 Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 18:20:21 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 18:20:30 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 18:30:37 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 18:30:37 2010 us=213230 GET INST BY VIRT: 172.16.0.240 [failed]
> >> > Fri Nov 12 19:01:38 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error
> >> 
> >> receiving
> >> 
> >> > auth confirmation from background process.Fri Nov 12 19:01:38 2010
> >> 
> >> Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > ri Nov 12 19:01:43 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 19:03:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 19:03:43 2010 us=203281 GET INST BY REAL: :50762 [failed]
> >> > Fri Nov 12 19:05:59 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error
> >> 
> >> receiving
> >> 
> >> > auth confirmation from background process.Fri Nov 12 19:05:59 2010
> >> 
> >> Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 19:06:13 2010 Fri Nov 12 19:06:13 2010 Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 19:07:18 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 19:09:20 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 19:09:25 2010Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 19:09:33 2010 Fri Nov 12 19:09:33 2010 Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 19:11:28 2010 Fri Nov 12 19:11:28 2010 Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 19:11:33 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 19:11:38 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 19:28:12 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_59sp6i14, 79.88.128.151:1577,643289968,1064558741,Fri Nov 12
> >> 
> >> 11:45:36
> >> 
> >> > 2010FFri Nov 12 19:28:12 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_yok5j34k,
> >> > 93.30.218.141:1077,16667279,183154955,Fri Nov 12 06:15:21 2010Fri Nov
> >> 
> >> 12
> >> 
> >> > 19:28:12 2010 us=460627 GET INST BY REAL: :64603 [failed]
> >> > Fri Nov 12 19:36:45 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_yok5j34k, 93.30.218.141:1077,16684427,183165847,Fri Nov 12
> >> > 06:15:21 2010Fri Nov 12 19:36:45 2010 us=398726
> >> > cmi_9zdg3msm/89.81.118.250:61743 GET INST BY VIRT: 192.168.1.6
> >> > [failed]
> >> > ri Nov 12 19:40:10 2010 Error: RADIUS-PLUGIN: BACKGROUND  AUTH: Auth
> >> > failed!.
> >> > Fri Nov 12 19:40:20 2010 RADIUS-PLUGIN: FOREGROUND THREAD: Error
> >> 
> >> receiving
> >> 
> >> > auth confirmation from background process.Fri Nov 12 19:40:20 2010
> >> 
> >> Error:
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > RADIUS-PLUGIN: BACKGROUND  AUTH: Auth failed!.
> >> > Fri Nov 12 20:36:03 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: Fri Nov
> >> 
> >> 12
> >> 
> >> > 20:36:03 2010 us=128572 GET INST BY VIRT: 172.16.0.171 [failed]
> >> > Fri Nov 12 20:46:08 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > cmi_6pbpeq8i, 84.100.40.241:64603,426589122,805635309,Fri Nov 12
> >> 
> >> 18:10:07
> >> 
> >> > 2010Fri Nov 12 20:46:08 2010 us=102021
> >> > cmi_1gc8t63j/82.230.129.133:1545 GET INST BY VIRT: 82.230.129.133
> >> > [failed]
> >> > 
> >> > Best Regards.
> >> > 
> >> > On Sat, Nov 13, 2010 at 3:45 PM, Ralf Lübben <address@hidden>
> >> 
> >> wrote:
> >> > > Hi,
> >> > > 
> >> > > can you check the log files before these repeating messages:
> >> > > 
> >> > > Fri Nov 12 19:10:43 2010 RADIUS-PLUGIN: BACKGROUND-ACCT: Scheduler:
> >> > > Update for User ...
> >> 
> >> > > Fri Nov 12 19:10:43 2010 RADIUS-PLUGIN: BACKGROUND ACCT: Scheduler:
> >> Read
> >> 
> >> > > Statusfile.
> >> > > Fri Nov 12 19:10:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > > OpenVPN CLIENT LIST
> >> > > Fri Nov 12 19:10:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > > Updated,Fri Nov 12 18:18:10 2010
> >> > > Fri Nov 12 19:10:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT:
> >> > > Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
> >> > > Fri Nov 12 19:10:43 2010 TEST: RADIUS-PLUGIN: BACKGROUND ACCT: ...
> >> > > 
> >> > > I would have  expected a messages like "RADIUS-PLUGIN: New failed
> >> > > ..."
> >> 
> >> or
> >> 
> >> > > something else.
> >> > > 
> >> > > Some background information:
> >> > > The plugin always creates two additional processes, one for
> >> 
> >> accounting,
> >> 
> >> > > one for authentication. If everything is fine you should always see
> >> > > three OpenVPN
> >> > > processes.
> >> > > 
> >> > > The process you analyse with pstack is the accouting process (I
> >> 
> >> guess),
> >> 
> >> > > which
> >> > > still produces the output messages. This process still works, the
> >> > > two others
> >> > > are finished/crashes, so the last messages are of interest which
> >> > > don't include
> >> > > the "ACCT" tag. These message should give a hint what happened to
> >> > > the other processes.
> >> > > 
> >> > > 
> >> > > Regards,
> >> > > Ralf
> > 
> > --
> > Färrükh Ähmëd




reply via email to

[Prev in Thread] Current Thread [Next in Thread]