[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: Help to increment freeradius wait timeout in
From:       Nick Porter <nick () portercomputing ! co ! uk>
Date:       2023-07-28 12:59:01
Message-ID: 68b811fd-e0ac-c122-570f-d08b7148c4eb () portercomputing ! co ! uk
[Download RAW message or body]

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
[Attachment #2 (multipart/mixed)]

[Attachment #4 (text/plain)]

On 28/07/2023 11:28, Kamal Majaiti wrote:
> Problem:
> Good morning, I am trying to perform a 2FA after a correct validation with
> MSCHAP against active directory, the postauth executes a script that sends
> an email with a link to confirm and authorize access, when the link is
> clicked, access is authorized based on data meanwhile the script with a
> while waits for the access to be confirmed but freeradius doesn't wait and
> gives me the following error:
>
> (0)       Executing: /bin/bash /etc/freeradius/3.0/otp/enviar2FA.sh
> %{User-Name}:
> (0)       EXPAND %{User-Name}
> (0)          --> xxx
> Child PID 17681 is taking too much time: forcing failure and killing child.
> (0)       ERROR: Failed to read from child output

The exec module has a timeout - when that hits the child process is 
killed which is what you are seeing here.

You need to increase the timeout in the exec module in mods-enabled/exec

However, this needs to be balanced against any timeouts in other parts 
of the system which will cause repeat packets to be sent.

-- 
Nick Porter


["OpenPGP_signature.asc" (application/pgp-signature)]

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

--===============3261813148945590627==--

[prev in list] [next in list] [prev in thread] [next in thread]