intermittent auth issue (proxy: request is no longer in proxy hash)

Chris Knipe savage at savage.za.org
Thu Jul 3 13:12:25 CEST 2014


On Thu, Jul 3, 2014 at 12:40 PM, Adam Bishop <Adam.Bishop at ja.net> wrote:
> On 3 Jul 2014, at 11:15, Chris Knipe <savage at savage.za.org> wrote:
>> Thu Jul  3 11:55:49 2014 : Debug: (216) Found Auth-Type = Accept
>> Thu Jul  3 11:55:49 2014 : Debug: (216) Auth-Type = Accept, accepting the user
>
> This is more likely to be your issue - I believe the previous message is just informational.

Just to clarify, this is how 99.999% of the responses are handled from
proxied requests:
Received Access-Accept Id 211 from 127.0.0.1:18130 to 127.0.0.1:38667 length 107
        Configuration-Token = 'OK:100:15:V:26843545600'
        Reply-Message = 'Welcome to the ...'
        Service-Type = Authenticate-Only
        Proxy-State = 0x313638
        Default-TTL = 19
Thu Jul  3 12:59:48 2014 : Debug: (0) proxy: request is no longer in proxy hash
Thu Jul  3 12:59:48 2014 : Debug: (0) # Executing section post-proxy

It does receive an access accept from the proxy server, but it enters
executes post_proxy.

Very intermittently this happens (and it's a very small amount of the
overall amount of requests too):
Received Access-Accept Id 28 from 127.0.0.1:18130 to 127.0.0.1:5245 length 106
        Configuration-Token = 'OK:100:15:V:26843545600'
        Reply-Message = 'Welcome to the ...'
        Service-Type = Authenticate-Only
        Proxy-State = 0x3835
        Default-TTL = 19
Thu Jul  3 11:55:49 2014 : Debug: (216) proxy: request is no longer in
proxy hash
Thu Jul  3 11:55:49 2014 : Debug: (216) Found Auth-Type = Accept
Thu Jul  3 11:55:49 2014 : Debug: (216) Auth-Type = Accept, accepting the user
Thu Jul  3 11:55:49 2014 : Auth: (216) Login OK:
[user at proxy.realm/oozuL8poop] (from client CLIENT port 0 cli c.d.99.6)
Thu Jul  3 11:55:49 2014 : Debug: (216) # Executing section post-auth

The access accept received is the same (identical attributes,
different values).  Yet it doesn't execute post_proxy.



Regards,
Chris Knipe


More information about the Freeradius-Users mailing list