[rbak-nsp] AAA daemon load is too high

[David Freedman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Navin, see http://www.ietf.org/rfc/rfc2869.txt sec 5.14 for details of
the message authenticator, this means your RADIUS server is not
providing this when asked to do so (i.e the redback provides it and as
such the radius server must respond with it)

As I have advised before, I would strongly suggest speaking with your
RADIUS administrators and having them get more involved in this
troubleshooting, if they are not capable of doing so then you should
consider if the platform should be changed for something more standardised.

David.


Navin Nepali wrote:
> This high cpu load problem in SE800 is still giving me problem. I have
> tried everything to control this. To test we have blocked all the PPPoE
> request (PADI) coming to SE800 but still we can see the cpu is still
> High. I have collected the AAA log in SE800 during blocking PADI.
>  
> I see following message:
> Oct 21 14:39:02: [0002]: [255/22:1:27/6/2/70475]: %AAA-7-RADIUS: aaa_idx
> 1cc0683b: aaaidx_tree_insert: insert aaa_idx to idx tree for context
> db_request_type Accounting Update. (adsl5532891)
> Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 20
> bytes from radius server 192.168.117.16 (1813)
> Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find
> matching server 192.168.117.16/1813
> Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 20
> bytes from radius server 192.168.117.16 (1813)
> Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find
> matching server 192.168.117.16/1813
> Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 48
> bytes from radius server 192.168.117.16 (1812)
> Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find
> matching server 192.168.117.16/1812
> Oct 21 14:39:02: %AAA-7-RADIUS: rad_response_sanity_check:
> Message-Authenticator is not present
> Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 48
> bytes from radius server 192.168.117.16 (1812)
> Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find
> matching server 192.168.117.16/1812
> Oct 21 14:39:02: %AAA-7-RADIUS: rad_response_sanity_check:
> Message-Authenticator is not present
> Oct 21 14:39:02: %AAA-7-RADIUS: rad_process_received_pkt: Receive 46
> bytes from radius server 192.168.117.16 (1812)
> Oct 21 14:39:02: [0002]: %AAA-7-RADIUS: rad_find_match_srv: Find
> matching server 192.168.117.16/1812
> Oct 21 14:39:02: %AAA-7-RADIUS: rad_response_sanity_check:
> Message-Authenticator is not present
> Oct 21 14:39:03: %AAA-7-RADIUS: rad_send, Process radius requests in
> authen high priority queue
>  
> Can someone tell me what does it mean by "rad_response_sanity_check:
> Message-Authenticator is not present"
>  
> Anyway i have attached the log with this mail.
>  
> Thanks!
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> redback-nsp mailing list
> redback-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/redback-nsp


- --

David Freedman
Group Network Engineering

david.freedman at uk.clara.net
Tel +44 (0) 20 7685 8000

Claranet Group
21 Southampton Row
London - WC1B 5HA - UK
http://www.claranet.com

Company Registration: 3152737 - Place of registration: England

All the information contained within this electronic message from
Claranet Ltd is covered by the disclaimer at
http://www.claranet.co.uk/disclaimer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkzAQ0MACgkQtFWeqpgEZrLVuACaAtrCZpvNcvvTIyLHxYOqDmSk
vHQAn2NyTaohWFxrhCIjecVyx0hd62ZU
=3iVD
-----END PGP SIGNATURE-----