RADIUS request concurrency problem

By: Domagoj Dom user 14 Jul 2020 at 12:29 a.m. CDT

6 Responses
Domagoj Dom gravatar
I am testing SuperGluu two factor authentication with LDAP and RADIUS (gluu-radius) with OpenVPN. Everything is working fine except if I test with multiple login requests with RADIUS at the same time. If two or more RADIUS requests come around the same time they are served in FIFO order which is ok, but second request is served only after the first one has successfull of failed authentication. This leads to authentication timer expiry on the second request from OpenVPN if user uses maximum time to approve the request in mobile app. I can see that Access-Request packet comes to the system but I can not see it in the radius-log up until the first request is served and I do not see notification request sent to api.gluu.org up until first request is fully served. Is this normal behaviour ? Thanks, Dom
Ubuntu 18.04
closed

Answers

By Dzouato Djeumen Rolain Bonaventure staff 14 Jul 2020 at 4:01 a.m. CDT

Copy
Dzouato Djeumen Rolain Bonaventure gravatar
Hello Sir, Thanks for your interest in Gluu and radius in particular. The behaviour you are experiencing is expected. Our Radius server which ships with Gluu CE is single threaded , meaning requests are processed one after the other. That said , if you need the kind of concurrency you're looking for right now , I would recommend our [radiator](https://gluu.org/docs/gluu-server/4.0/admin-guide/radius-server/gluu-radiator/) plugin. In the upcoming weeks , we will make the radius server that ships with Gluu CE multithreaded. It won't be very high performance , but should work for your use case. Let me know if you need more questions answered. Rolain

By Domagoj Dom user 14 Jul 2020 at 4:28 a.m. CDT

Copy
Domagoj Dom gravatar
Hello Rolain, Thank you very much for your answer. I was suspecting that this was like this. But looking forward to new version so I can test it. Radiator plugin is only for Radiator server or there is a chance that it can be used with FreeRADIUS ? Thanks, Dom

By Dzouato Djeumen Rolain Bonaventure staff 14 Jul 2020 at 4:46 a.m. CDT

Copy
Dzouato Djeumen Rolain Bonaventure gravatar
Hello Dom, The Radiator plugin works only with Radiator server. We're not supporting FreeRADIUS yet unfortunately. Rolain

By Domagoj Dom user 21 Oct 2020 at 2:09 a.m. CDT

Copy
Domagoj Dom gravatar
Hello, Can you please confirm that version 4.2.1 Gluu CE has multithreaded radius server ? We are planing the upgrade but there is nothing mentioned in the release notes about radius. Thanks; Dom

By Dzouato Djeumen Rolain Bonaventure staff 21 Oct 2020 at 10:17 a.m. CDT

Copy
Dzouato Djeumen Rolain Bonaventure gravatar
Hello, Unfortunately , not yet , but we're actively working towards it. I cannot give you an exact date of when a beta of the multithreaded version will ship , but would you be interested in being notified once it does ?

By Domagoj Dom user 24 Oct 2020 at 9:45 a.m. CDT

Copy
Domagoj Dom gravatar
Hello, Yes, please inform when you have beta version for testing. Thanks, Dom

Post an answer