Несколько процессов radiusd

Dimson · Пт ноя 14, 2008 1:46 am

Приветствую!
Появилась проблема:
Ежедневно процесс radiusd дублируется, т.е. создается еще один процесс, если его не убить, то создается еще один и т.д. Загрузка процессора сразу подпрыгивает до 100%.
Вот лог radius.log:

Код: Выделить всё

Thu Nov 13 00:01:45 2008 : Error: Discarding duplicate request from client mpd4:
52541 - ID: 214 due to unfinished request 25959
Thu Nov 13 00:06:50 2008 : Error: Discarding duplicate request from client mpd4:
60864 - ID: 196 due to unfinished request 26169
Thu Nov 13 00:08:59 2008 : Error: Discarding duplicate request from client mpd4:
62795 - ID: 145 due to unfinished request 26245
Thu Nov 13 00:09:03 2008 : Error: Discarding duplicate request from client mpd4:
62795 - ID: 145 due to unfinished request 26245
Thu Nov 13 00:09:07 2008 : Error: Discarding duplicate request from client mpd4:
62795 - ID: 145 due to unfinished request 26245
Thu Nov 13 00:09:30 2008 : Error: WARNING: Unresponsive child (id 135591936) for
 request 26245 (in component authenticate module <server core>)
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
58635 - ID: 70 due to unfinished request 26251
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
58635 - ID: 70 due to unfinished request 26251
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
58635 - ID: 70 due to unfinished request 26251
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
60897 - ID: 224 due to unfinished request 26250
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
56606 - ID: 42 due to unfinished request 26252
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
50316 - ID: 20 due to unfinished request 26253
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
61263 - ID: 116 due to unfinished request 26254
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
59705 - ID: 242 due to unfinished request 26255
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
60897 - ID: 224 due to unfinished request 26250
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
56606 - ID: 42 due to unfinished request 26252
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
50316 - ID: 20 due to unfinished request 26253
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
61263 - ID: 116 due to unfinished request 26254
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
64330 - ID: 132 due to unfinished request 26256
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
51991 - ID: 215 due to unfinished request 26257
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
59705 - ID: 242 due to unfinished request 26255
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
54166 - ID: 227 due to unfinished request 26258
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
64330 - ID: 132 due to unfinished request 26256
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
51991 - ID: 215 due to unfinished request 26257
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
57166 - ID: 84 due to unfinished request 26259
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
54515 - ID: 251 due to unfinished request 26260
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
56803 - ID: 175 due to unfinished request 26261
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
54166 - ID: 227 due to unfinished request 26258
Thu Nov 13 00:09:30 2008 : Error: Discarding duplicate request from client mpd4:
64330 - ID: 132 due to unfinished request 26256
63727 - ID: 120 due to unfinished request 26268
Thu Nov 13 00:09:48 2008 : Error: Discarding duplicate request from client mpd4:
63727 - ID: 120 due to unfinished request 26268
Thu Nov 13 00:09:52 2008 : Error: Discarding duplicate request from client mpd4:
63727 - ID: 120 due to unfinished request 26268
Thu Nov 13 00:10:01 2008 : Error: WARNING: Unresponsive child (id 135591424) for
 request 26251 (in component authenticate module <server core>)
Thu Nov 13 00:10:09 2008 : Error: Discarding duplicate request from client mpd4:
55265 - ID: 221 due to unfinished request 26287
Thu Nov 13 00:10:11 2008 : Error: WARNING: Unresponsive child (id 135590912) for
 request 26268 (in component authorize module rlm_exec)
Thu Nov 13 00:10:13 2008 : Error: Discarding duplicate request from client mpd4:
55265 - ID: 221 due to unfinished request 26287
Thu Nov 13 00:10:17 2008 : Error: Discarding duplicate request from client mpd4:
55265 - ID: 221 due to unfinished request 26287
Thu Nov 13 00:10:33 2008 : Error: Discarding duplicate request from client mpd4:
55424 - ID: 161 due to unfinished request 26299
Thu Nov 13 00:10:37 2008 : Error: Discarding duplicate request from client mpd4:
55424 - ID: 161 due to unfinished request 26299
Thu Nov 13 00:10:37 2008 : Error: WARNING: Unresponsive child (id 135589888) for
 request 26287 (in component authenticate module <server core>)
Thu Nov 13 00:15:08 2008 : Error: Discarding duplicate request from client mpd4:
49333 - ID: 159 due to unfinished request 26465
Thu Nov 13 00:15:08 2008 : Error: Discarding duplicate request from client mpd4:
53957 - ID: 197 due to unfinished request 26466
Thu Nov 13 00:15:08 2008 : Error: Discarding duplicate request from client mpd4:
49333 - ID: 159 due to unfinished request 26465
Thu Nov 13 00:26:50 2008 : Error: Discarding duplicate request from client mpd4:
57423 - ID: 124 due to unfinished request 26874
Thu Nov 13 00:30:19 2008 : Error: rlm_radutmp: Logout for NAS mpd4 port 9, but n
o Login record
Thu Nov 13 01:15:05 2008 : Error: Discarding duplicate request from client mpd4:
57393 - ID: 59 due to unfinished request 28450
Thu Nov 13 09:57:07 2008 : Error: Exec-Program: Abnormal child exit: No child pr
ocesses
Thu Nov 13 14:53:57 2008 : Error: Discarding duplicate request from client mpd4:
56065 - ID: 83 due to unfinished request 45685
Thu Nov 13 14:54:01 2008 : Error: Discarding duplicate request from client mpd4:
56065 - ID: 83 due to unfinished request 45685
Thu Nov 13 20:34:16 2008 : Error: Discarding duplicate request from client mpd4:
63325 - ID: 176 due to unfinished request 55146
Thu Nov 13 20:34:19 2008 : Error: Discarding duplicate request from client mpd4:
51100 - ID: 229 due to unfinished request 55147
Thu Nov 13 20:41:33 2008 : Error: Discarding duplicate request from client mpd4:
61898 - ID: 189 due to unfinished request 55476
Thu Nov 13 20:58:08 2008 : Error: Discarding duplicate request from client mpd4:
55455 - ID: 254 due to unfinished request 56164
Thu Nov 13 20:59:18 2008 : Error: Discarding duplicate request from client mpd4:
51766 - ID: 84 due to unfinished request 56212
Thu Nov 13 21:01:39 2008 : Error: Discarding duplicate request from client mpd4:
52926 - ID: 177 due to unfinished request 56311
Thu Nov 13 21:01:43 2008 : Error: Discarding duplicate request from client mpd4:
63232 - ID: 202 due to unfinished request 56312
Fri Nov 14 01:27:02 2008 : Error: rlm_radutmp: Logout for NAS mpd4 port 4, but n
o Login record

В чем причина не могу понять, может у кого нибудь возникало такое?
Подскажите, если знаете плз.
Иногда, но реже дублируется mpd процесс, в этом случае все встает колом

ОС: FreeBSD
Заметил, что происходит это в основном когда клиент коннектится с FreeBSD системы, вот лог mpd за этот период:

Код: Выделить всё

Nov 14 01:27:02 bill mpd: PPTP: Incoming control connection from [user IP] 59392 to [Server IP] 1723
Nov 14 01:27:02 bill mpd: pptp0: attached to connection with [user IP] 59392
Nov 14 01:27:02 bill mpd: [pptp4] Accepting PPTP connection
Nov 14 01:27:02 bill mpd: [pptp4] opening link "pptp4"...
Nov 14 01:27:02 bill mpd: [pptp4] link: OPEN event
Nov 14 01:27:02 bill mpd: [pptp4] LCP: Open event
Nov 14 01:27:02 bill mpd: [pptp4] LCP: state change Initial --> Starting
Nov 14 01:27:02 bill mpd: [pptp4] LCP: LayerStart
Nov 14 01:27:02 bill mpd: [pptp4] PPTP: attaching to peer's outgoing call
Nov 14 01:27:02 bill mpd: [pptp4] link: UP event
Nov 14 01:27:02 bill mpd: [pptp4] link: origination is remote
Nov 14 01:27:02 bill mpd: [pptp4] LCP: Up event
Nov 14 01:27:02 bill mpd: [pptp4] LCP: state change Starting --> Req-Sent
Nov 14 01:27:02 bill mpd: [pptp4] LCP: SendConfigReq #115
Nov 14 01:27:02 bill mpd:  ACFCOMP
Nov 14 01:27:02 bill mpd:  PROTOCOMP
Nov 14 01:27:02 bill mpd:  MRU 1500
Nov 14 01:27:02 bill mpd:  MAGICNUM 49463a5d
Nov 14 01:27:02 bill mpd:  AUTHPROTO CHAP MSOFTv2
Nov 14 01:27:02 bill mpd:  MP MRRU 1600
Nov 14 01:27:02 bill mpd:  MP SHORTSEQ
Nov 14 01:27:02 bill mpd:  ENDPOINTDISC [802.1] 00 11 43 d7 7f a0
Nov 14 01:27:02 bill mpd: [pptp4] LCP: rec'd Configure Request #1 (Req-Sent)
Nov 14 01:27:02 bill mpd:  ACFCOMP
Nov 14 01:27:02 bill mpd:  PROTOCOMP
Nov 14 01:27:02 bill mpd:  ACCMAP 0x000a0000
Nov 14 01:27:02 bill mpd:  MRU 1500
Nov 14 01:27:02 bill mpd:  MAGICNUM 68b4530c
Nov 14 01:27:02 bill mpd: [pptp4] LCP: SendConfigAck #1
Nov 14 01:27:02 bill mpd:  ACFCOMP
Nov 14 01:27:02 bill mpd:  PROTOCOMP
Nov 14 01:27:02 bill mpd:  ACCMAP 0x000a0000
Nov 14 01:27:02 bill mpd:  MRU 1500
Nov 14 01:27:02 bill mpd:  MAGICNUM 68b4530c
Nov 14 01:27:02 bill mpd: [pptp4] LCP: state change Req-Sent --> Ack-Sent
Nov 14 01:27:02 bill mpd: [pptp4] LCP: rec'd Configure Reject #115 (Ack-Sent)
Nov 14 01:27:02 bill mpd:  MP MRRU 1600
Nov 14 01:27:02 bill mpd:  MP SHORTSEQ
Nov 14 01:27:02 bill mpd: [pptp4] LCP: SendConfigReq #116
Nov 14 01:27:02 bill mpd:  ACFCOMP
Nov 14 01:27:02 bill mpd:  PROTOCOMP
Nov 14 01:27:02 bill mpd:  MRU 1500
Nov 14 01:27:02 bill mpd:  MAGICNUM 49463a5d
Nov 14 01:27:02 bill mpd:  AUTHPROTO CHAP MSOFTv2
Nov 14 01:27:02 bill mpd: [pptp4] LCP: rec'd Configure Ack #116 (Ack-Sent)
Nov 14 01:27:02 bill mpd:  ACFCOMP
Nov 14 01:27:02 bill mpd:  PROTOCOMP
Nov 14 01:27:02 bill mpd:  MRU 1500
Nov 14 01:27:02 bill mpd:  MAGICNUM 49463a5d
Nov 14 01:27:02 bill mpd:  AUTHPROTO CHAP MSOFTv2
Nov 14 01:27:02 bill mpd: [pptp4] LCP: state change Ack-Sent --> Opened
Nov 14 01:27:02 bill mpd: [pptp4] LCP: auth: peer wants nothing, I want CHAP
Nov 14 01:27:02 bill mpd: [pptp4] CHAP: sending CHALLENGE len:17
Nov 14 01:27:02 bill mpd: [pptp4] LCP: LayerUp
Nov 14 01:27:02 bill mpd: [pptp4] CHAP: rec'd RESPONSE #1
Nov 14 01:27:02 bill mpd:  Name: "[User Name]"
Nov 14 01:27:02 bill mpd: [pptp4] AUTH: Auth-Thread started
Nov 14 01:27:02 bill mpd: [pptp4] AUTH: Trying RADIUS
Nov 14 01:27:02 bill mpd: [pptp4] RADIUS: RadiusAuthenticate for: [User Name]
Nov 14 01:27:02 bill mpd: [pptp4] RADIUS: rec'd RAD_ACCESS_ACCEPT for user [User Name]
Nov 14 01:27:02 bill mpd: [pptp4] AUTH: RADIUS returned authenticated
Nov 14 01:27:02 bill mpd: [pptp4] AUTH: Auth-Thread finished normally
Nov 14 01:27:02 bill mpd: [pptp4] CHAP: ChapInputFinish: status authenticated
Nov 14 01:27:02 bill mpd:  Reply message: S=A8AE1669BD1654E8DDB4523773E8B632CAB2322A
Nov 14 01:27:02 bill mpd: [pptp4] CHAP: sending SUCCESS len:42
Nov 14 01:27:02 bill mpd: [pptp4] LCP: authorization successful
Nov 14 01:27:02 bill mpd: [pptp4] Bundle up: 1 link, total bandwidth 64000 bps
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: Open event
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: state change Initial --> Starting
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: LayerStart
Nov 14 01:27:02 bill mpd: [pptp4] CCP: Open event
Nov 14 01:27:02 bill mpd: [pptp4] CCP: state change Initial --> Starting
Nov 14 01:27:02 bill mpd: [pptp4] CCP: LayerStart
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: Up event
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: state change Starting --> Req-Sent
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: SendConfigReq #66
Nov 14 01:27:02 bill mpd:  IPADDR [Server IP]
Nov 14 01:27:02 bill mpd:  COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Nov 14 01:27:02 bill mpd: [pptp4] CCP: Up event
Nov 14 01:27:02 bill mpd: [pptp4] CCP: state change Starting --> Req-Sent
Nov 14 01:27:02 bill mpd: [pptp4] CCP: SendConfigReq #55
Nov 14 01:27:02 bill mpd:  MPPC
Nov 14 01:27:02 bill mpd:    0x01000060:MPPE(40, 128 bits), stateless
Nov 14 01:27:02 bill mpd: [pptp4] LCP: rec'd Terminate Request #2 (Opened)
Nov 14 01:27:02 bill mpd: [pptp4] LCP: state change Opened --> Stopping
Nov 14 01:27:02 bill mpd: [pptp4] AUTH: Accounting data for user [User Name]: 0 seconds, 142 octets in, 198 octets out
Nov 14 01:27:02 bill mpd: [pptp4] Bundle up: 0 links, total bandwidth 9600 bps
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: Close event
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: state change Req-Sent --> Closing
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: SendTerminateReq #67
Nov 14 01:27:02 bill mpd: [pptp4] error writing len 8 frame to bypass: Network is down
Nov 14 01:27:02 bill mpd: [pptp4] CCP: Close event
Nov 14 01:27:02 bill mpd: [pptp4] CCP: state change Req-Sent --> Closing
Nov 14 01:27:02 bill mpd: [pptp4] CCP: SendTerminateReq #56
Nov 14 01:27:02 bill mpd: [pptp4] error writing len 8 frame to bypass: Network is down
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: Down event
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: LayerFinish
Nov 14 01:27:02 bill mpd: [pptp4] No NCPs left. Closing links...
Nov 14 01:27:02 bill mpd: [pptp4] closing link "pptp4"...
Nov 14 01:27:02 bill mpd: [pptp4] IPCP: state change Closing --> Initial
Nov 14 01:27:02 bill mpd: [pptp4] CCP: Down event
Nov 14 01:27:02 bill mpd: [pptp4] CCP: LayerFinish
Nov 14 01:27:02 bill mpd: [pptp4] CCP: state change Closing --> Initial
Nov 14 01:27:02 bill mpd: [pptp4] AUTH: Cleanup
Nov 14 01:27:02 bill mpd: [pptp4] LCP: SendTerminateAck #117
Nov 14 01:27:02 bill mpd: [pptp4] LCP: LayerDown
Nov 14 01:27:02 bill mpd: [pptp4] link: CLOSE event
Nov 14 01:27:02 bill mpd: [pptp4] LCP: Close event
Nov 14 01:27:02 bill mpd: [pptp4] LCP: state change Stopping --> Closing
Nov 14 01:27:02 bill mpd: [pptp4] AUTH: Accounting-Thread was canceled
Nov 14 01:27:02 bill mpd: [pptp4] AUTH: Accounting-Thread started
Nov 14 01:27:02 bill mpd: [pptp4] RADIUS: RadiusAccount for: [User Name] (Type: 2)
Nov 14 01:27:02 bill mpd: [pptp4] RADIUS: Termination cause: Peer disconnect, RADIUS: 1
Nov 14 01:27:02 bill mpd: pptp0-0: call cleared by peer
Nov 14 01:27:02 bill mpd: pptp0-0: killing channel
Nov 14 01:27:02 bill mpd: [pptp4] PPTP call terminated
Nov 14 01:27:02 bill mpd: [pptp4] link: DOWN event
Nov 14 01:27:02 bill mpd: [pptp4] LCP: Down event
Nov 14 01:27:02 bill mpd: [pptp4] LCP: LayerFinish
Nov 14 01:27:02 bill mpd: [pptp4] LCP: state change Closing --> Initial
Nov 14 01:27:02 bill mpd: pptp0: closing connection with [user IP] 59392
Nov 14 01:27:02 bill mpd: [pptp4] RADIUS: rec'd RAD_ACCOUNTING_RESPONSE for user [User Name]
Nov 14 01:27:02 bill mpd: [pptp4] RADIUS: RadiusGetParams: WARNING no MPPE-Keys received, MPPE will not work
Nov 14 01:27:02 bill mpd: [pptp4] AUTH: Accounting-Thread finished normally
Nov 14 01:27:02 bill mpd: pptp0: killing connection with [user IP] 59392

Заменил IP-адрес пользователя на [user IP], IP-адрес сервера (Radius, MPD4, Abills) на [Server IP] и Логин пользователя на [User Name]
В чем причина? помогите разобраться...

Пт ноя 14, 2008 7:46 am

нужно увеличивать значение
max_requests
max_servers

Dimson · Пт ноя 14, 2008 10:26 am

~AsmodeuS~ писал(а):нужно увеличивать значение
max_requests
max_servers

Изменил...
Было:

Код: Выделить всё

max_requests = 1024
max_servers = 32

Поменял на:

Код: Выделить всё

max_requests = 2048
max_servers = 64

Понаблюдаю... Если поможет, буду признателен!

Dimson · Пт ноя 14, 2008 10:38 am

Только дописал сообщение, проверяю ps ax | grep radiusd , а там уже два процесса висит...

Радиус перезапускал после изменения конфига...
Может еще нужно увеличить?

Dozz · Пт ноя 14, 2008 12:40 pm

По-моему проблема похожа на эту и эту.

Насколько я понимаю, проблема в обоих случаях связана с несоответсвием дефолтных библиотек процессам радиуса и мпд. Но это лишь догадки. Исправьте меня если я неправ.

Dimson · Пт ноя 14, 2008 1:02 pm

Почитал, там про MPD5
У меня установлен MPD 4.4.1
Вариант с увеличением параметров max_requests и max_servers не помог, уже раз 6 убивал лишние процессы, причем обычная

Код: Выделить всё

kill № процесса

не помогает, приходится насильно

Код: Выделить всё

kill -9 № процесса

boroda · Пт ноя 14, 2008 8:18 pm

Рекомендую обновить ядро и мир. Был такой же баг с радиусом при работе с MPD4&MPD5.
Спасал только kill -9. Правда и после обновления radius можно вырубить только через kill -9, но он слава богу не падает, а работает и проц не грузит, если его не трогать

. Кстати на freeradius2 такой беды мною не замечено.

Dimson · Сб ноя 15, 2008 1:48 am

Так проблема не в том, что радиус падает, а в том, что он запускает параллельно ещё несколько процессов, сегодня утром 3 лишних процесса было, помимо основного... Причём он нормально продолжает авторизовывать пользователей, только загрузка процессора 100%.
Всю систему устанавливал не так давно, порты обновлял!

Dimson · Пн ноя 17, 2008 1:22 am

Обновил порты, установил freeradius 1.1.7_3
Запустил... Понаблюдаю, может исправлено...

Dimson · Пн ноя 17, 2008 3:43 am

Не помогло, процесс всё равно дублируется!

Если менять на freeradius2, конфигурация сильно отличается? Потому что все наживую приходится менять, как быстро можно это сделать? абоненты уже возмущаются...

ran · Сообщение **ran** » Пн ноя 17, 2008 6:41 am

все наживую приходится менять

а нафига? подними тестовую машинку и издевайся себе...

Dimson · Пн ноя 17, 2008 7:33 am

ran писал(а):
все наживую приходится менять
а нафига? подними тестовую машинку и издевайся себе...

Возможности пока нет, а нужно это отремонтировать в самое ближайшее время...

ran · Сообщение **ran** » Пн ноя 17, 2008 7:41 am

а как он (радиус) кстати ведёт себя в однопоточном режиме?

Dimson · Пн ноя 17, 2008 7:54 am

ran писал(а):а как он (радиус) кстати ведёт себя в однопоточном режиме?

Я запустил сразу в связке с MPD и Abills, без них не тестировал.
Я так чувствую, что придётся железяку тестовую искать...

ran · Сообщение **ran** » Пн ноя 17, 2008 8:00 am

Я запустил сразу в связке с MPD и Abills, без них не тестировал.

а про без них речь и не шла... с ними но однопоточно

man radiusd писал(а): -s Run in "single server" mode. The server normally runs with multiple threads and/or pro‐
cesses, which can lower its response time to requests. Some systems have issues with thread‐
ing, however, so running in "single server" mode may help to address those issues. In single
server mode, the server will also not "daemonize" (auto-background) itself.