+1
Исправлен

Radius падает от запросов на доступ от двух адресов клиентов

Сергей_kms 1 год назад обновлен mikbill (CEO) 1 год назад 5

Здравствуйте!

В начале года установили MikBill «Стартер» на CentOS 7, по инструкции:

https://wiki.mikbill.ru/billing/howto/mikbill_install_centos7

Сейчас клиентская база пока небольшая.

Используем схему IPoE

Сеть построена на GPON BDCOM, OLT выступает dhcp релеем запросов и добавляет option82 аттрибуты для авторизации клиентов на Mikbill DHCP (Radius).

В качестве NAS mikrotik с HotSpot и авторизацией по IP:

https://wiki.mikbill.ru/billing/nas_access_server/mikrotik_ipoe#%D0%B0%D0%B2%D1%82%D0%BE%D1%80%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F_%D0%BF%D0%BE_ip_%D0%B0%D0%B4%D1%80%D0%B5%D1%81%D1%83ip_unnambered

Mikbill ставил через ansible, поэтому радиус и php из пакетов:

MikBill 3.03.02 сборка 290519-11:00

freeradius-3.0.13-9.el7_5.x86_64

php-common-7.2.14-1.el7.remi.x86_64

perl-PHP-Serialization-0.34-16.el7.noarch


Последнее время radius стал падать очень часто, раз в минуту - что очень критично.

В день до 1,5 тыс. раз падает.

Падает из-за модуля rlm_perl.so, при обработке ответа из билинга.

После диагностики и сбора статистики выяснил что радиус падает от запросов на доступ для двух адресов клиентов,

которые в билинге были заморожены. После разморозки и перевода их в отключеные радиус падать перестал.

Т.е. на данный момент ползоваться фунционалом "Заморозка" нельзя.

Привожу отладочные данные:

Лог падений радиуса:

[root@mikbill3 radius]# grep segfault messages

...

Jun 5 17:14:39 mikbill3 kernel: radiusd[23561]: segfault at 422 ip 00007fed5ec3e3b1 sp 00007fed54c68e70 error 4 in rlm_perl.so[7fed5ec39000+7000]

Jun 5 17:15:39 mikbill3 kernel: radiusd[23611]: segfault at 422 ip 00007f2b88ec03b1 sp 00007f2b7e6e9e70 error 4 in rlm_perl.so[7f2b88ebb000+7000]

Jun 5 17:17:39 mikbill3 kernel: radiusd[23829]: segfault at 422 ip 00007fb5440843b1 sp 00007fb53a0aee70 error 4 in rlm_perl.so[7fb54407f000+7000]

Jun 5 17:19:39 mikbill3 kernel: radiusd[23947]: segfault at 422 ip 00007f65177743b1 sp 00007f650cf9de70 error 4 in rlm_perl.so[7f651776f000+7000]

Jun 5 17:21:39 mikbill3 kernel: radiusd[24016]: segfault at 422 ip 00007f908c21a3b1 sp 00007f9081a43e70 error 4 in rlm_perl.so[7f908c215000+7000]

Jun 5 17:23:39 mikbill3 kernel: radiusd[24269]: segfault at 422 ip 00007fe2b136c3b1 sp 00007fe2a6b95e70 error 4 in rlm_perl.so[7fe2b1367000+7000]

Jun 5 17:24:42 mikbill3 kernel: radiusd[24338]: segfault at 422 ip 00007fef270ea3b1 sp 00007fef1d114e70 error 4 in rlm_perl.so[7fef270e5000+7000]

Jun 5 17:26:39 mikbill3 kernel: radiusd[24376]: segfault at 422 ip 00007f229da353b1 sp 00007f229325ee70 error 4 in rlm_perl.so[7f229da30000+7000]

Jun 5 17:27:39 mikbill3 kernel: radiusd[24615]: segfault at 422 ip 00007f1c529273b1 sp 00007f1c48951e70 error 4 in rlm_perl.so[7f1c52922000+7000]

Jun 5 17:29:39 mikbill3 kernel: radiusd[24663]: segfault at 422 ip 00007f76497153b1 sp 00007f763ef3ee70 error 4 in rlm_perl.so[7f7649710000+7000]

Jun 5 17:30:39 mikbill3 kernel: radiusd[24726]: segfault at 422 ip 00007f5d123f03b1 sp 00007f5d07c19e70 error 4 in rlm_perl.so[7f5d123eb000+7000]

Jun 5 17:32:39 mikbill3 kernel: radiusd[24939]: segfault at 422 ip 00007fae8bcfe3b1 sp 00007fae81d28e70 error 4 in rlm_perl.so[7fae8bcf9000+7000]

Jun 5 17:33:39 mikbill3 kernel: radiusd[25004]: segfault at 422 ip 00007f9b4f9bd3b1 sp 00007f9b451e6e70 error 4 in rlm_perl.so[7f9b4f9b8000+7000]

Jun 5 17:34:39 mikbill3 kernel: radiusd[25042]: segfault at 422 ip 00007fc9f67e23b1 sp 00007fc9ec00be70 error 4 in rlm_perl.so[7fc9f67dd000+7000]

Jun 5 17:36:39 mikbill3 kernel: radiusd[25080]: segfault at 422 ip 00007f9f075ff3b1 sp 00007f9efce28e70 error 4 in rlm_perl.so[7f9f075fa000+7000]

Jun 5 17:38:39 mikbill3 kernel: radiusd[25314]: segfault at 422 ip 00007fbebff963b1 sp 00007fbeb57bfe70 error 4 in rlm_perl.so[7fbebff91000+7000]

Jun 5 17:39:39 mikbill3 kernel: radiusd[25377]: segfault at 422 ip 00007f4366b2c3b1 sp 00007f435cb56e70 error 4 in rlm_perl.so[7f4366b27000+7000]

Jun 5 17:41:39 mikbill3 kernel: radiusd[25416]: segfault at 422 ip 00007f8350eb53b1 sp 00007f83466dee70 error 4 in rlm_perl.so[7f8350eb0000+7000]

Jun 5 17:42:39 mikbill3 kernel: radiusd[25658]: segfault at 422 ip 00007fbabdca13b1 sp 00007fbab34cae70 error 4 in rlm_perl.so[7fbabdc9c000+7000]

Jun 5 17:44:39 mikbill3 kernel: radiusd[25696]: segfault at 422 ip 00007efde8fee3b1 sp 00007efddf018e70 error 4 in rlm_perl.so[7efde8fe9000+7000]

Jun 5 17:45:42 mikbill3 kernel: radiusd[25765]: segfault at 422 ip 00007f23a935d3b1 sp 00007f239f387e70 error 4 in rlm_perl.so[7f23a9358000+7000]

Jun 5 17:46:39 mikbill3 kernel: radiusd[25977]: segfault at 422 ip 00007f6b028c43b1 sp 00007f6af88eee70 error 4 in rlm_perl.so[7f6b028bf000+7000]

Jun 5 17:48:39 mikbill3 kernel: radiusd[26016]: segfault at 422 ip 00007f56820dc3b1 sp 00007f5677905e70 error 4 in rlm_perl.so[7f56820d7000+7000]

Jun 5 17:50:39 mikbill3 kernel: radiusd[26079]: segfault at 422 ip 00007f13c24403b1 sp 00007f13b846ae70 error 4 in rlm_perl.so[7f13c243b000+7000]

Jun 5 17:52:39 mikbill3 kernel: radiusd[26317]: segfault at 422 ip 00007fa2c71443b1 sp 00007fa2bc96de70 error 4 in rlm_perl.so[7fa2c713f000+7000]

Jun 5 17:54:39 mikbill3 kernel: radiusd[26409]: segfault at 422 ip 00007effb44d43b1 sp 00007effaa4fee70 error 4 in rlm_perl.so[7effb44cf000+7000]

Jun 5 17:56:39 mikbill3 kernel: radiusd[26472]: segfault at 422 ip 00007f833327d3b1 sp 00007f83292a7e70 error 4 in rlm_perl.so[7f8333278000+7000]

Jun 5 17:57:39 mikbill3 kernel: radiusd[26707]: segfault at 422 ip 00007f68626753b1 sp 00007f685869fe70 error 4 in rlm_perl.so[7f6862670000+7000]

Jun 5 17:59:39 mikbill3 kernel: radiusd[26747]: segfault at 422 ip 00007fb705d343b1 sp 00007fb6fbd5ee70 error 4 in rlm_perl.so[7fb705d2f000+7000]

Jun 5 18:01:39 mikbill3 kernel: radiusd[26809]: segfault at 422 ip 00007f68288483b1 sp 00007f681e872e70 error 4 in rlm_perl.so[7f6828843000+7000]

Jun 5 18:02:39 mikbill3 kernel: radiusd[27065]: segfault at 422 ip 00007fd946acc3b1 sp 00007fd93c2f5e70 error 4 in rlm_perl.so[7fd946ac7000+7000]

Jun 5 18:04:39 mikbill3 kernel: radiusd[27102]: segfault at 422 ip 00007f3b9e53c3b1 sp 00007f3b94566e70 error 4 in rlm_perl.so[7f3b9e537000+7000]

Jun 5 18:06:42 mikbill3 kernel: radiusd[27164]: segfault at 422 ip 00007f7e1d0a43b1 sp 00007f7e130cee70 error 4 in rlm_perl.so[7f7e1d09f000+7000]

Jun 5 18:07:39 mikbill3 kernel: radiusd[27397]: segfault at 422 ip 00007f99a2d9c3b1 sp 00007f99985c5e70 error 4 in rlm_perl.so[7f99a2d97000+7000]

Jun 5 18:08:39 mikbill3 kernel: radiusd[27433]: segfault at 422 ip 00007f90aecf43b1 sp 00007f90a4d1ee70 error 4 in rlm_perl.so[7f90aecef000+7000]

Jun 5 18:09:39 mikbill3 kernel: radiusd[27472]: segfault at 422 ip 00007f508fd0b3b1 sp 00007f5085d35e70 error 4 in rlm_perl.so[7f508fd06000+7000]

Jun 5 18:10:39 mikbill3 kernel: radiusd[27509]: segfault at 422 ip 00007efd326073b1 sp 00007efd28631e70 error 4 in rlm_perl.so[7efd32602000+7000]

Jun 5 18:12:39 mikbill3 kernel: radiusd[27726]: segfault at 422 ip 00007fd8e39213b1 sp 00007fd8d914ae70 error 4 in rlm_perl.so[7fd8e391c000+7000]

Jun 5 18:13:39 mikbill3 kernel: radiusd[27789]: segfault at 422 ip 00007f614bdfc3b1 sp 00007f6141e26e70 error 4 in rlm_perl.so[7f614bdf7000+7000]

Jun 5 18:14:39 mikbill3 kernel: radiusd[27826]: segfault at 422 ip 00007ff9a9ee03b1 sp 00007ff99ff0ae70 error 4 in rlm_perl.so[7ff9a9edb000+7000]

Jun 5 18:16:39 mikbill3 kernel: radiusd[27865]: segfault at 422 ip 00007f703fac13b1 sp 00007f7035aebe70 error 4 in rlm_perl.so[7f703fabc000+7000]

Jun 5 18:17:39 mikbill3 kernel: radiusd[28106]: segfault at 422 ip 00007f786c89b3b1 sp 00007f78628c5e70 error 4 in rlm_perl.so[7f786c896000+7000]

Jun 5 18:18:39 mikbill3 kernel: radiusd[28175]: segfault at 422 ip 00007f10d7e963b1 sp 00007f10cd6bfe70 error 4 in rlm_perl.so[7f10d7e91000+7000]

Jun 5 18:20:39 mikbill3 kernel: radiusd[28229]: segfault at 422 ip 00007fee21b4b3b1 sp 00007fee17374e70 error 4 in rlm_perl.so[7fee21b46000+7000]

Jun 5 18:21:39 mikbill3 kernel: radiusd[28499]: segfault at 422 ip 00007f800f3523b1 sp 00007f8004b7be70 error 4 in rlm_perl.so[7f800f34d000+7000]

Jun 5 18:22:39 mikbill3 kernel: radiusd[28547]: segfault at 422 ip 00007f0561ed13b1 sp 00007f05576fae70 error 4 in rlm_perl.so[7f0561ecc000+7000]

Jun 5 18:24:39 mikbill3 kernel: radiusd[28803]: segfault at 422 ip 00007fe5261663b1 sp 00007fe51c190e70 error 4 in rlm_perl.so[7fe526161000+7000]

Jun 5 18:25:39 mikbill3 kernel: radiusd[28966]: segfault at 422 ip 00007fe56e7743b1 sp 00007fe563f9de70 error 4 in rlm_perl.so[7fe56e76f000+7000]

Jun 5 18:26:39 mikbill3 kernel: radiusd[29176]: segfault at 422 ip 00007fbf420d03b1 sp 00007fbf378f9e70 error 4 in rlm_perl.so[7fbf420cb000+7000]

Jun 5 18:28:39 mikbill3 kernel: radiusd[29214]: segfault at 422 ip 00007f94629cc3b1 sp 00007f94581f5e70 error 4 in rlm_perl.so[7f94629c7000+7000]

Часть вывода debug`а радиуса:

[root@mikbill3 radius]# zgrep -B 2 'func = authorize exit' radius.log-20190606.gz

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:22:42 2019 : Debug: (2) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 10.

--

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:23:39 2019 : Debug: (33) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 60.

--

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:24:39 2019 : Debug: (55) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 81.

--

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:24:42 2019 : Debug: (2) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 10.

--

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:25:39 2019 : Debug: (20) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 37.

--

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:25:42 2019 : Debug: (0) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 6.

--

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:26:39 2019 : Debug: (12) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 26.

--

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:26:42 2019 : Debug: (1) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 6.

--

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:27:42 2019 : Debug: (14) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 27.

--

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:28:39 2019 : Debug: (35) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 48.



/etc/raddb/mikbill.pl:

строки 54, 56 выделены жирным

...

sub authorize {

print $sock "auth\n";

$answer=<$sock>;

print $sock serialize(\%RAD_REQUEST);

$answer=<$sock>;

print $sock serialize(\%RAD_REPLY);

$answer=<$sock>;

print $sock serialize(\%RAD_CHECK);

$answer=<$sock>;

if ($answer eq "reject\n") {

return RLM_MODULE_REJECT;

}

$answer=<$sock>;

%RAD_REPLY=%{unserialize($answer)};

$answer=<$sock>;

%RAD_CHECK=%{unserialize($answer)};

return RLM_MODULE_OK;

}

...

Пример плохого запроса:

Wed Jun 5 18:28:38 2019 : Debug: Thread 2 handling request 35, (18 handled so far)

Wed Jun 5 18:28:38 2019 : Debug: (35) Received Access-Request Id 169 from x.x.x.x:52322 to x.x.x.x:1812 length 208

Wed Jun 5 18:28:38 2019 : Debug: (35) NAS-Port-Type = Ethernet

Wed Jun 5 18:28:38 2019 : Debug: (35) Calling-Station-Id = "C8:E7:D8:A9:DB:45"

Wed Jun 5 18:28:38 2019 : Debug: (35) Called-Station-Id = "hs3608h"

Wed Jun 5 18:28:38 2019 : Debug: (35) NAS-Port-Id = "vlanXXX"

Wed Jun 5 18:28:38 2019 : Debug: (35) User-Name = "C8:E7:D8:A9:DB:45"

Wed Jun 5 18:28:38 2019 : Debug: (35) NAS-Port = 2153799277

Wed Jun 5 18:28:38 2019 : Debug: (35) Acct-Session-Id = "80605e6d"

Wed Jun 5 18:28:38 2019 : Debug: (35) Framed-IP-Address = 172.18.0.9

Wed Jun 5 18:28:38 2019 : Debug: (35) Mikrotik-Host-IP = 172.18.0.9

Wed Jun 5 18:28:38 2019 : Debug: (35) CHAP-Challenge = 0xb989962bb071edd13041e889189c24fe

Wed Jun 5 18:28:38 2019 : Debug: (35) CHAP-Password = 0xac53a439ffb3e87db0a4ba995b5845563f

Wed Jun 5 18:28:38 2019 : Debug: (35) Service-Type = Login-User

Wed Jun 5 18:28:38 2019 : Debug: (35) WISPr-Logoff-URL = "http://172.18.0.1/logout"

Wed Jun 5 18:28:38 2019 : Debug: (35) NAS-Identifier = "x.x.x.x"

Wed Jun 5 18:28:38 2019 : Debug: (35) NAS-IP-Address = x.x.x.x

Wed Jun 5 18:28:38 2019 : Debug: (35) session-state: No State attribute

Wed Jun 5 18:28:38 2019 : Debug: (35) # Executing section authorize from file /etc/raddb/sites-enabled/mikbill

Wed Jun 5 18:28:38 2019 : Debug: (35) authorize {

Wed Jun 5 18:28:38 2019 : Debug: (35) modsingle[authorize]: calling preprocess (rlm_preprocess)

Wed Jun 5 18:28:38 2019 : Debug: (35) modsingle[authorize]: returned from preprocess (rlm_preprocess)

Wed Jun 5 18:28:38 2019 : Debug: (35) [preprocess] = ok

Wed Jun 5 18:28:38 2019 : Debug: (35) modsingle[authorize]: calling suffix (rlm_realm)

Wed Jun 5 18:28:38 2019 : Debug: (35) suffix: Checking for suffix after "@"

Wed Jun 5 18:28:38 2019 : Debug: (35) suffix: No '@' in User-Name = "C8:E7:D8:A9:DB:45", looking up realm NULL

Wed Jun 5 18:28:38 2019 : Debug: (35) suffix: No such realm "NULL"

Wed Jun 5 18:28:38 2019 : Debug: (35) modsingle[authorize]: returned from suffix (rlm_realm)

Wed Jun 5 18:28:38 2019 : Debug: (35) [suffix] = noop

Wed Jun 5 18:28:38 2019 : Debug: (35) modsingle[authorize]: calling mschap (rlm_mschap)

Wed Jun 5 18:28:38 2019 : Debug: (35) modsingle[authorize]: returned from mschap (rlm_mschap)

Wed Jun 5 18:28:38 2019 : Debug: (35) [mschap] = noop

Wed Jun 5 18:28:38 2019 : Debug: (35) modsingle[authorize]: calling perl (rlm_perl)

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'C8:E7:D8:A9:DB:45'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'CHAP-Password'} = &request:CHAP-Password -> '0xac53a439ffb3e87db0a4ba995b5845563f'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'x.x.x.x'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '2153799277'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Login-User'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'Framed-IP-Address'} = &request:Framed-IP-Address -> '172.18.0.9'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'hs3608h'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'C8:E7:D8:A9:DB:45'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'NAS-Identifier'} = &request:NAS-Identifier -> 'x.x.x.x'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'CHAP-Challenge'} = &request:CHAP-Challenge -> '0xb989962bb071edd13041e889189c24fe'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'Acct-Session-Id'} = &request:Acct-Session-Id -> '80605e6d'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Jun 5 2019 18:28:38 +10'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'vlanXXX'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'Mikrotik-Host-IP'} = &request:Mikrotik-Host-IP -> '172.18.0.9'

Wed Jun 5 18:28:38 2019 : Debug: (35) perl: $RAD_REQUEST{'WISPr-Logoff-URL'} = &request:WISPr-Logoff-URL -> 'http://172.18.0.1/logout'

WARN: Unused characters in string after 49. at /etc/raddb/mikbill.pl line 54.

WARN: Unused characters in string after 6. at /etc/raddb/mikbill.pl line 56.

Wed Jun 5 18:28:39 2019 : Debug: (35) perl: perl_embed:: module = /etc/raddb/mikbill.pl , func = authorize exit status= Not a HASH reference at /etc/raddb/mikbill.pl line 56, line 48.

--- все радиус упал, пошла начальная загрузка

Wed Jun 5 18:28:39 2019 : Info: Debugger not attached

Wed Jun 5 18:28:39 2019 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked

Wed Jun 5 18:28:39 2019 : Info: rlm_sql_mysql: libmysql version: 5.6.42-84.2

Wed Jun 5 18:28:39 2019 : Info: rlm_sql (sql): Attempting to connect to database "mikbill"

Wed Jun 5 18:28:39 2019 : Info: rlm_sql (sql): Opening additional connection (0), 1 of 1 pending slots used

Wed Jun 5 18:28:39 2019 : Info: Loaded virtual server

Wed Jun 5 18:28:39 2019 : Info: Loaded virtual server dhcp

...

Абонент 172.18.0.9 после перевода из замороженных в отключенные нормально обрабатывался радиусом чуть меньше суток, а потом опять стал падать.
Значит проблемы не из-за состояния заморозки.

ответ техподдержки:

Александр Дудяк:

Добрый день, судя по скриншоту, это не корректные настройки для NAS Hotspot с авторизацией по IP.
https://wiki.mikbill.ru/billing/nas_access_server/mikbillnas#mikrotik_ipoeipnet_ip_unnumberd

46 тыс. обработанных запросов и 2 суток без падений, стабильно работает.
Действительно дело было в настройке NAS В биллинге.

Делюсь опытом))

Исправлен

также добавили fix в ядро 3.03.03 версия

Сервис поддержки клиентов работает на платформе UserEcho