[RADIATOR] Users Authenticating 800 times in 12 hours for 13 WISM sessions

I'll be sending more info to radius-supp...@open.com.au shortly but I wonder what people here think. We have some users who authenticate successfully to our AD over 800 times over the course of 12 hours yet the WISMs show only 13 sessions. This can't be normal

Re: [RADIATOR] Load Balancers Returning IGNORE Warnings

Well, I suspect that the bottleneck is in our SQL logging. We have 7 instances logging to one table in a slow database. The table is locked by each instance while it's logging. The big question is how do I determine that SQL is the bottleneck from the radius logs? --- Roberto Ullfig - rull...@u

Re: [RADIATOR] Load Balancers Returning IGNORE Warnings

esday, September 16, 2014 12:31 PM To: Ullfig, Roberto Alfredo; radiator@open.com.au Subject: Re: [RADIATOR] Load Balancers Returning IGNORE Warnings Hello Roberto, to see who long SQL queries take, you could do this: - configure one Radiator instance with LogMicroseconds option - turn on Tr

Re: [RADIATOR] Load Balancers Returning IGNORE Warnings

ig - rull...@uic.edu ACCC Research Programmer -Original Message- From: Heikki Vatiainen [mailto:h...@open.com.au] Sent: Tuesday, September 16, 2014 12:31 PM To: Ullfig, Roberto Alfredo; radiator@open.com.au Subject: Re: [RADIATOR] Load Balancers Returning IGNORE Warnings Hello Roberto,

[RADIATOR] AuthWIRELESS.pm, AuthSUSPEND.pm?

I'm installing the latest radius server using our old configuration and when I start it up I get complaints about missing perl modules: Radius::AuthLDAP2: Radius::AuthNTLM: Radius::AuthSUSPEND: Radius::AuthWIRELESS: Where do I get these from? I noticed that they are installed on our current pr

Re: [RADIATOR] AuthWIRELESS.pm, AuthSUSPEND.pm?

Sorry was wrong, only SUSPEND and WIRELESS are missing from both RPMS: 4.10-1 and 4.14-1. --- Roberto Ullfig - rull...@uic.edu ACCC Research Programmer From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Ullfig, Roberto Alfredo Sent: Wednesday, December 03

Re: [RADIATOR] AuthWIRELESS.pm, AuthSUSPEND.pm?

Never mind, some local code had been written. --- Roberto Ullfig - rull...@uic.edu ACCC Research Programmer ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator

[RADIATOR] Radiator Load Balancing

Hello, Right now we are using Radiator's own load balancer. Would using an F5 Load Balancer to load balance make any sense and would it work? Their product is here: https://f5.com We use it for other services but they are all tcp based. Thanks! --- Roberto Ullfig - rull...@uic.edu ACCC Resear

[RADIATOR] Odd PEAP Reconnection Failures

I have a laptop running Windows 7. It's not connected to Active Directory. I can login to the wireless network fine the first time but if I disconnect and try to reconnect I get a PEAP failure in the radiator log. If I wait a while I can connect again. The radiator server is a development server

Re: [RADIATOR] Odd PEAP Reconnection Failures

in your credentials when connecting) don't see this behavior. --- Roberto Ullfig - rull...@uic.edu ACCC Research Programmer -Original Message- From: a.l.m.bu...@lboro.ac.uk [mailto:a.l.m.bu...@lboro.ac.uk] Sent: Thursday, July 02, 2015 3:57 PM To: Ullfig, Roberto Alfredo Cc: radiato

[RADIATOR] F5 and Radius - Load Balancing Not Working

We've configured our F5 per their documentation. We are testing with one WISM and seeing all the connections go to one Radius server in the pool (10 servers). Rarely, a different server is chosen. The F5 shows "connections" being evenly distributed but I don't know what "connections" means becau

Re: [RADIATOR] F5 and Radius - Load Balancing Not Working

Behalf Of Ullfig, Roberto Alfredo Sent: Thursday, July 23, 2015 1:41 PM To: radiator@open.com.au Subject: [RADIATOR] F5 and Radius - Load Balancing Not Working We've configured our F5 per their documentation. We are testing with one WISM and seeing all the connections go to one Radius serv

Re: [RADIATOR] F5 and Radius - Load Balancing Not Working

#log local0. "pool $pool member [lindex $picked 0] selected" } else { log local0. "no calling-station-id in radius packet" } } Regards, Ernst From: radiator-boun...@open.com.au<mailto:radiator-boun...@open.com.au> [mailto:radiator-boun...@open.

Re: [RADIATOR] F5 and Radius - Load Balancing Not Working

we force the server offline on the F5 the WISM continues to send all the packets to the original Radius server. --- Roberto Ullfig - rull...@uic.edu ACCC Research Programmer From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Ullfig, Roberto Alfredo Sent: Mond

[RADIATOR] Hourly Authentication-Count Downward Spikes

Hello all, It's the first day of classes here and we're seeing hourly successful authentication-count downward spikes starting around 5-10 minutes before the hour - was wondering if any other people here see the same thing in their environments and whether this is a result of user behavior and

Re: [RADIATOR] Hourly Authentication-Count Downward Spikes

lto:h...@open.com.au] Sent: Monday, August 24, 2015 6:34 PM To: Ullfig, Roberto Alfredo Cc: radiator@open.com.au Subject: Re: [RADIATOR] Hourly Authentication-Count Downward Spikes Hello Roberto - This is almost always a problem with the backend authentication resource. A trace 4 debug with LogMicrose

Re: [RADIATOR] PEAP internal session resumption breaks some clients

I don't know if this is the same issue we had. It was trivial to get an 802.1x error on my non-AD laptop (for some reason I could not get it to fail with my account on an AD connected laptop). All I had to do was connect and reconnect quickly a few times in a row. We added "EAPTLS_SessionResumpt

Re: [RADIATOR] Radiator Version 4.16 released - security fixes, enhancements and new features

We installed the previous version from RPM. Should we remove that RPM before installing this version plus patches? --- Roberto Ullfig – rull...@uic.edu ACCC Research Programmer -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Heik

Re: [RADIATOR] Radiator Version 4.16 released - security fixes, enhancements and new features

Also, is it typical for patches to not be released in RPMs? --- Roberto Ullfig – rull...@uic.edu ACCC Research Programmer -Original Message- From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Ullfig, Roberto Alfredo Sent: Tuesday, November 03, 2015 1

Re: [RADIATOR] Radiator Version 4.16 released - security fixes, enhancements and new features

2:22 PM To: radiator@open.com.au Subject: Re: [RADIATOR] Radiator Version 4.16 released - security fixes, enhancements and new features On 11/03/2015 09:54 PM, Ullfig, Roberto Alfredo wrote: > Also, is it typical for patches to not be released in RPMs? Yes, the patches work best with the .

[RADIATOR] ntlm_auth memory leak

Hello, Radiator runs ntlm_auth as a server but the process has a memory leak. I could not find any patches for this issue. Has anyone else seen this? We could restart it of course but wondered if there was another solution. --- Roberto Ullfig - rull...@uic.edu ACCC Research Programmer

[RADIATOR] EAP PEAP Challenges

Is there a paper somewhere which discusses EAP PEAP Challenges? I'm debugging a new controller's access to radiator and finding that a working auth requires 11 udp packets each way and I don't understand why. What info is being passed? --- Roberto Ullfig - rull...@uic.edu ACCC Research Programme

Re: [RADIATOR] EAP PEAP Challenges

Are all the challenges independent of each other? I can't find anything in the debug log that ties the incoming packets together. --- Roberto Ullfig - rull...@uic.edu ACCC Research Programmer From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Ullfig, Ro

Re: [RADIATOR] EAP PEAP Challenges

...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Ullfig, Roberto Alfredo Sent: Tuesday, April 12, 2016 8:39 AM To: radiator@open.com.au Subject: Re: [RADIATOR] EAP PEAP Challenges Are all the challenges independent of each other? I can't find anything in the debug log that

Re: [RADIATOR] EAP PEAP Challenges

From: Hugh Irvine [mailto:h...@open.com.au] Sent: Tuesday, April 12, 2016 7:43 PM To: Ullfig, Roberto Alfredo; Alan Buxey Cc: radiator@open.com.au Subject: Re: [RADIATOR] EAP PEAP Challenges Hello Roberto - Welcome to the wonderful world of EAP. Note that EAP is essentially a stateful encry

[RADIATOR] NTLM/Samba Auth and OUs

Can Radiator restrict access to an OU or can this be done in Samba? --- Roberto Ullfig - rull...@uic.edu ACCC Research Programmer ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator

Re: [RADIATOR] more memory leakage?

We've been seeing a leak for about year or more but it's ntlm_auth not radiator itself. We do about 1.8 million auths per day. Our servers have 4 GB RAM and radiator needs to be restarted 3 or 4 times a year. --- Roberto Ullfig - rull...@uic.edu IT Technical Associate Enterprise Architecture and