Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 03 Mar 2003 20:05:01 +0100
From:      Michael Bretterklieber <mbretter@jawa.at>
To:        Vincent Jardin <vjardin@wanadoo.fr>
Cc:        net@FreeBSD.ORG, Archie Cobbs <archie@dellroad.org>
Subject:   Re: [mpd] radius and dynamic bundles
Message-ID:  <3E63A75D.6090904@jawa.at>
References:  <200303022347.10283.vjardin@wanadoo.fr> <3E63245D.6040800@jawa.at> <200303031827.54786.vjardin@wanadoo.fr>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

Vincent Jardin wrote:
> On Monday 03 March 2003 09:46, Michael Bretterklieber wrote:
> 
>>Hi,
>>
>>Vincent Jardin schrieb:
>>
>>>1/ When Radius is used with mpd and the answer delay of the Radius server
>>>is high, how can some PAP or CHAP timeout be avoided ?
>>
>>you mean, that the client times out during authentication saying that
>>the server didn't responded?
> 
> 
> Yes, that the main problem that happens sometimes.
> 
> 
>>A known issue is that mpd is blocked during RADIUS requests, the
>>solution will be to change from rad_send_request(); to
>>rad_init_send_request() and rad_continue_send_request(); to avoid
>>blocking of mpd.
>>
>>I have this on my todo-list, but atm it has low prio.
> 
> 
> It does not look to be simple because the whole PAP and CHAP authentication 
> are processed by PapInput() and ChapInput() that call RadiusPAPAuthenticate() 
> and RadiusCHAPAuthenticate(). It is a synchronous call. In order to use 
> rad_init_send_request()  and rad_continue_send_request(), PapInput() and 
> ChapInput() need to be splitted, doesn't they ?
hmm, IMO, yes we must detect somewhere that a RADIUS request is already 
in progress and skip some code, and if the request is finished we have 
only to send the response back to the peer.

I plan delivering patches to Archie in this week for enhanced RADIUS 
support (incl. accounting) for the next Version of mpd, however I will 
have a look at this problem and see how tricky is this to implement.

bye,
-- 
------------------------------- -------------------------------------
Michael Bretterklieber        - Michael.Bretterklieber@jawa.at
JAWA Management Software GmbH - http://www.jawa.at
Liebenauer Hauptstr. 200        -------------- privat ---------------
A-8041 GRAZ                     GSM: ++43-(0)676-93 96 698
Tel: ++43-(0)316-403274-12      E-mail:   michael@bretterklieber.com
Fax: ++43-(0)316-403274-10      http://www.bretterklieber.com
------------------------------- -------------------------------------
"...the number of UNIX installations has grown to 10, with more
expected..." - Dennis Ritchie and Ken Thompson, June 1972


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E63A75D.6090904>