User Tools

Site Tools


auth_server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
auth_server [2007/11/06 18:37]
gabe
auth_server [2013/09/28 16:06] (current)
Line 1: Line 1:
 +====== August 2, 2011 ======
 +Auth server was returning errors on any wifidog page. (Could not allocate memory?) I restarted it and it came back fine.
 +
 +====== February 22, 2010 ======
 +
 +Auth returning errors, unable to connect to PostGres. ​
 +
 +  * Postgres status was down so restart
 +''​sudo /​etc/​init.d/​postgresql-8.3 restart''​
 +
 +
 +Auth back up.
 +
 +-- Michael Pereira
 +
 +
 +
 +====== September 30, 2009 ======
 +The auth server has spun out of control at around noon two days in a row, and needed a hard reboot. ​ I checked the logs, and it just looks like an above-normal but not extraordinary number of hits to the login page.  I added "​OfficeLiveConnector"​ to the blacklist, but basically this problem is only going to get worse.
 +
 +====== September 9, 2009 ======
 +The auth server went down yesterday afternoon. ​ Looks like it was the same problem. ​ I "​blacklisted"​ "​Google Updater"​. ​ There were also a ton (5000) of emails in the mailman queue, all from the past 2-3 weeks; I deleted them.
 +
 +====== June 11, 2009 ======
 +The auth server went down at about noon today, and I brought it back at about 3pm.  At 12:08pm, the server was hit with about 50 login redirects from one IP in about 20 seconds. ​ From then on the server just began spinning wildly. ​ I added the UserAgent string to the blacklist, and installed Cache_Lite. ​ [Actually, I can't get Cache_Lite working.]
 +
 +====== June 4, 2009 ======
 +I ended up having to upgrade to a 512MB slice in order for the server to not run out of memory.
 +
 +Over the past few days users have reported certificate errors when they hit the auth server ("​untrusted site" or "​unknown authority"​) -- I remembered that when installing this cert on the old auth server I had to add an extra file; the "chain file"​. ​ I added this (SSLCertificateChainFile in the apache config), and the problem seems to be fixed.
 +
 +Here are the changes I made to the config files to reduce memory:
 +<​code>​
 +###​apache.conf
 +#found at http://​wiki.vpslink.com/​Low_memory_MySQL_/​_Apache_configurations
 +StartServers 1
 +MinSpareServers 1
 +MaxSpareServers 5
 +ServerLimit 40
 +MaxClients 40
 +MaxRequestsPerChild 200
 +</​code>​
 +
 +<​code>​
 +###​postgresql.conf
 +max_connections = 40 
 +</​code>​
 +
 +<​code>​
 +###​mysql/​my.cnf
 +###used the small my.cnf found at /​usr/​share/​doc/​mysql-server-5.0/​examples/​my-small.cnf
 +</​code>​
 +
 +====== May 29, 2009 ======
 +Our deal with TheWire is up, so I'm migrating the server to VPS.  Hard to get the memory usage down so it doesn'​t thrash, but seems to be running ok now.  Will keep monitoring. ​ Also, we're now up to wifidog rev 1390.
 +
 +====== 2008 ======
 +The auth server got kinda crashy on us, 'cause it was on a box with not much RAM.  In particular, it would crash when an unauthenticated user would launch an RSS reader -- which would slam the router with dozens of simultaneous HTTP requests, which were each redirected to the server. ​ I wrote this little chunk of code to try to minimize this impact; I didn't do any quantitative testing, but anecdotally it seemed to reduce the problem:
 +
 +<​code>​
 +/////////////​ (wifidog/​include/​common.php,​ before '​require_once('​init_php.php'​)'​)
 +$rssagents = array( '​NetNewsWire',​ '​AppleSyndication',​ '​ProRSSReader',​ '​Apple-PubSub',​ '​Transmission','​Shasta',​ '​Microsoft-CryptoAPI',​ '​Feedfetcher',​ '​AntiVir-NG-Upd',​ '​Windows-Update-Age'​ );
 +
 +$keepgoing = 1;
 +foreach ($rssagents as $thisrssua) {
 +        if ( (strpos($_SERVER['​HTTP_USER_AGENT'​],​$thisrssua) === 0) ) {
 +                $keepgoing = 0;
 +        }
 +}
 +
 +if ($keepgoing == 0) {
 +        print "​request cancelled";​
 +        die();
 +}
 +/////////////​ END OF GABE ADDITION
 +</​code>​
 +
 ====== November 6, 2007 ====== ====== November 6, 2007 ======
 Wifidog sent out email notifications at around 7:15PM tonight that all the hotspots were down.  Seems like apache on the server had crashed.  ​ Wifidog sent out email notifications at around 7:15PM tonight that all the hotspots were down.  Seems like apache on the server had crashed.  ​
auth_server.1194395856.txt.gz ยท Last modified: 2013/09/28 16:06 (external edit)