After some debug I discovered that it was not an authentication problem but an accounting problem. I was doing a proxy to store accounting data in a remote radius server, but port 1813 of that radius server was shutdown and so my server tried to send accouting information without success until timeout.<br>
<br>After several seconds without response the radius client sent again the same radius request to my server and it was discarded generating the errors logs because it was trying to proxy the request to the remote server.<br>
<br>Thanks for your help, it has been very helpful <br><br><div class="gmail_quote">2010/3/17 Christian Pinedo Zamalloa <span dir="ltr"><<a href="mailto:chr.pinedo@gmail.com">chr.pinedo@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
It is strange because ntlm_auth is working, is the only method to authenticate users to access WiFi network and all the days are 20-30 users connected. I think that could be something related to a network issue or an active directory issue. <br>
<br><div class="gmail_quote">2010/3/16 Alan Buxey <span dir="ltr"><<a href="mailto:A.L.M.Buxey@lboro.ac.uk" target="_blank">A.L.M.Buxey@lboro.ac.uk</a>></span><div><div></div><div class="h5"><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Hi,<br>
<div><br>
> Mon Mar 15 18:57:09 2010 : Error: Discarding duplicate request from client ccc port 32768 - ID: 85 due to unfinished request 28810<br>
> Mon Mar 15 18:57:14 2010 : Error: Discarding duplicate request from client ccc port 32768 - ID: 85 due to unfinished request 28810<br>
> Mon Mar 15 18:57:19 2010 : Error: Discarding duplicate request from client ccc port 32768 - ID: 85 due to unfinished request 28810<br>
> Mon Mar 15 18:57:24 2010 : Error: Discarding duplicate request from client ccc port 32768 - ID: 85 due to unfinished request 28810<br>
> Mon Mar 15 18:57:28 2010 : Error: Discarding duplicate request from client ccc port 32768 - ID: 86 due to unfinished request 28823<br>
> Mon Mar 15 18:57:33 2010 : Error: Discarding duplicate request from client ccc port 32768 - ID: 86 due to unfinished request 28823<br>
<br>
</div>something is blocking the threads.... you may ned to increase debugging to see what/where.<br>
<div><br>
><br>
> I don't know if it is a common issue in a deployment based on active directory or if something could be wrong. Winbind also gives me a lot of warning/errors:<br>
</div>i<br>
<br>
those are a ncie load of errors. does using 'kinit' work? does using ntlm_auth work?<br>
<font color="#888888"><br>
alan<br>
</font><div><div></div><div>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div></div></div><br><br clear="all"><div><div></div><div class="h5"><br>-- <br>Christian Pinedo Zamalloa (zako)<br>PGP keyID: 0x828D0C80<br>Fingerprint: 7BFF 4105 F46B 7977 BD96 348C 1007 4FF8 828D 0C80<br>
<div style="display: inline;"></div>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Christian Pinedo Zamalloa (zako)<br>PGP keyID: 0x828D0C80<br>Fingerprint: 7BFF 4105 F46B 7977 BD96 348C 1007 4FF8 828D 0C80<br>
<div style="visibility: hidden; display: inline;" id="avg_ls_inline_popup"></div><style type="text/css">#avg_ls_inline_popup { position:absolute; z-index:9999; padding: 0px 0px; margin-left: 0px; margin-top: 0px; width: 240px; overflow: hidden; word-wrap: break-word; color: black; font-size: 10px; text-align: left; line-height: 13px;}</style>