RE: [squid-users] squid_radius_auth

> -----Original Message-----
> From: Chris Robertson [mailto:crobertson@gci.net]
> Sent: Thursday, November 01, 2007 3:46 PM
> To: squid-users@squid-cache.org
> Subject: Re: [squid-users] squid_radius_auth
>
> Matt Ruzicka wrote:
> > We're seeing an odd issue where radius authentication will start failing
> > sometime after the machine has been in production for a variable amount
> > of time. The issue appears to arise only after at least 6 hours, but
> > sometimes as long as 10 or 11 hours. If the machine is not in
> > production and is only receiving test authentications the issues does
> > not appear to arise.
..snip..
> > However, if I issue a reconfig the problem goes away for another 6+
> > hours or so.
..snip..
> > * Has anyone else seen similar behavior?
>
> Yes. See
> http://www.squid-cache.org/mail-archive/squid-users/200605/0494.html
> Granted, this issue was appearing with Squid-2.5-Stable13 and
> squid_radius_auth 1.08.
>
> As stated, updating to Squid 2.6 is recommended.
..snip..
> > * Is there any additional logging or debugging I can run to hopefully
> > see what is happening?
>
> From http://www.squid-cache.org/mail-archive/squid-users/200501/0554.html:
>
> debug_options ALL,1 29,9 84,9
>
> then see cache.log for details on the auth progress.

Well, I might have been overly optimistic. I manually upgraded to 2.6STABLE16 from source and I'm still seeing the issue.

I enabled the suggested debugging, but honestly I'm not sure what it is /supposed/ to look like so I'm not sure if it looks right.

Here is what it is kicking back while things are working, but I'm a little nervous about leaving this running for 6+ hours do to disk space issues.

2007/11/08 10:37:45| authenticateAuthenticate: header Basic MTAwMDAwQG5ldC1xLm5ldDp0MzV0ZDFAIQ==.
2007/11/08 10:37:45| authenticateAuthenticate: This is a new checklist test on FD:54
2007/11/08 10:37:45| authenticateAuthenticate: no connection authentication type
2007/11/08 10:37:45| authenticateAuthUserRequestLock auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateAuthUserRequestLock auth_user request '0xa7bc098' now at '1'.
2007/11/08 10:37:45| authenticateDecodeAuth: header = 'Basic MTAwMDAwQG5ldC1xLm5ldDp0MzV0ZDFAIQ=='
2007/11/08 10:37:45| authenticateBasicDecodeAuth: cleartext = 'user@domain.tld:password'
2007/11/08 10:37:45| authBasicAuthUserFindUsername: Looking for user 'user@domain.tld'
2007/11/08 10:37:45| authBasicDecodeAuth: Found user 'user@domain.tld' in the user cache as '0x9be8d30'
2007/11/08 10:37:45| authenticateAuthUserLock auth_user '0x9be8d30'.
2007/11/08 10:37:45| authenticateAuthUserLock auth_user '0x9be8d30' now at '2'.
2007/11/08 10:37:45| authenticateValidateUser: Validating Auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateValidateUser: Validated Auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateValidateUser: Validating Auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateValidateUser: Validated Auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateAuthUserRequestLock auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateAuthUserRequestLock auth_user request '0xa7bc098' now at '2'.
2007/11/08 10:37:45| authenticateAuthUserRequestUnlock auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateAuthUserRequestUnlock auth_user_request '0xa7bc098' now at '1'.
2007/11/08 10:37:45| authenticateAuthUserRequestLock auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateAuthUserRequestLock auth_user request '0xa7bc098' now at '2'.
2007/11/08 10:37:45| authenticateValidateUser: Validating Auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateValidateUser: Validated Auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateAuthUserRequestUnlock auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateAuthUserRequestUnlock auth_user_request '0xa7bc098' now at '1'.
2007/11/08 10:37:45| authenticateFixHeader: headertype:0 authuser:0xa7bc098
2007/11/08 10:37:45| authenticateAuthUserRequestUnlock auth_user request '0xa7bc098'.
2007/11/08 10:37:45| authenticateAuthUserRequestUnlock auth_user_request '0xa7bc098' now at '0'.
2007/11/08 10:37:45| authenticateAuthUserRequestFree: freeing request 0xa7bc098
2007/11/08 10:37:45| authenticateAuthUserUnlock auth_user '0x9be8d30'.
2007/11/08 10:37:45| authenticateAuthUserUnlock auth_user '0x9be8d30' now at '1'.

Does anyone else see anything out of place?

Thank again.

- Matt
Received on Thu Nov 08 2007 - 08:51:02 MST