preventing multiple authentication attempts for up to 2 minutes.

Matthew Newton mcn4 at leicester.ac.uk
Fri Mar 18 15:05:15 CET 2016


On Fri, Mar 18, 2016 at 09:55:00AM -0400, Jim Whitescarver wrote:
> "Update timers on the remote system to not retry so quickly?"
> 
> I don't think so. Radtest sends three requests just seconds apart, and I
> get the correct result every time.

> (0) Ignoring duplicate packet from client localhost port 32940 - ID: 2 due
> to unfinished request in component authenticate module python

OK, I misunderstood and thought you meant it was logging that for
the remote client.

> There must be something else causing the problem.

I would hazard a guess that the client is not getting a response
"quick enough", and starting a new request with a different RADIUS
ID, rather than just retrying the existing request.

You should see that in the debug output. Compare the request ID
between the duplicates from radtest, and the remote client/NAS.

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>


More information about the Freeradius-Users mailing list