DynamicID authentication randomly stops working in R80.10

Support Center > Search Results > SecureKnowledge Details

Solution ID	sk121213
Product	Mobile Access / SSL VPN
Version	R80.10
OS	Gaia
Platform / Model	All
Date Created	12-Nov-2017
Last Modified	03-Nov-2019

Symptoms

DynamicID authentication randomly stops working in R80.10 after policy installation.

CVPND.elg shows many lines like these:

[PID][DATE TIME][AsyncCurl] sender_curl_socket_event_handler - entering for socket 1457 ssd 0x9cc7be0
[PID][DATE TIME][AsyncCurl] sender_curl_socket_event_handler - ctx 0x930bfd8 socket 1457 action 0x2
[PID][DATE TIME][AsyncCurl] sender_curl_socket_event_handler - calling curl_multi_socket_action
[PID][DATE TIME][AsyncCurl] print_multi_code - entering
[PID][DATE TIME][AsyncCurl] print_multi_code - from (sender_curl_socket_event_handler) returns (CURLM_OK)
[PID][DATE TIME][AsyncCurl] check_completed_transfers - entering for curl multi 0x91d2168
[PID][DATE TIME][tevent] T_event_mainloop_iter_epoll: epoll get signals for N=1 events
[PID][DATE TIME][tevent] T_event_mainloop_iter_epoll: epoll epoll_wait reports socket/event 1457/4

CVPND.elg may show lines like the following: (Please note, the numbers may vary ) [PID][DATE TIME] T_event_fdclr_epoll: failed to clear socket: 3661 from epoll set: Bad file descriptor [PID][DATE TIME] T_event_fdclr_epoll: failed to clear socket: 3662 from epoll set: Bad file descriptor [PID][DATE TIME] T_event_fdclr_epoll: failed to clear socket: 3663 from epoll set: Bad file descriptor
There is a high number of file descriptors.

Cause

File descriptor leak in role matcher API

Solution

Note: To view this solution you need to Sign In .