<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
<title></title>
</head>
<body>
<p style="margin: 0px;">Something strange is going on: we do re-authentification every ten seconds with one WinXP SP3 client</p>
<p style="margin: 0px;">hooked up to a Cisco 3560G Switch. The reauth interval is small to stress-test the setup.</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">It works w/a problems for 1-2 Days, then we get:</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">Sun Aug 15 10:00:51 2010 : Auth: Login OK: [jan/<via Auth-Type = EAP>] (from client swba1-00-test port 0 via TLS tunnel)<br />
Sun Aug 15 10:00:51 2010 : Auth: Login OK: [jan/<via Auth-Type = EAP>] (from client swba1-00-test port 50043 cli 00-08-74-46-34-F7)<br />
Sun Aug 15 10:01:05 2010 : Auth: Login OK: [jan/<via Auth-Type = EAP>] (from client swba1-00-test port 0 via TLS tunnel)<br />
Sun Aug 15 10:01:05 2010 : Auth: Login OK: [jan/<via Auth-Type = EAP>] (from client swba1-00-test port 50043 cli 00-08-74-46-34-F7)<br />
Sun Aug 15 10:01:20 2010 : Auth: Login OK: [jan/<via Auth-Type = EAP>] (from client swba1-00-test port 0 via TLS tunnel)<br />
Sun Aug 15 10:01:20 2010 : Auth: Login OK: [jan/<via Auth-Type = EAP>] (from client swba1-00-test port 50043 cli 00-08-74-46-34-F7)<br />
Sun Aug 15 10:01:39 2010 : Error: Discarding duplicate request from client swba1-00-test port 1645 - ID: 157 due to unfinished request 125603<br />
Sun Aug 15 10:01:44 2010 : Error: Child PID 30686 is taking too much time: forcing failure and killing child.<br />
Sun Aug 15 10:01:44 2010 : Auth: Login incorrect: [jan/<via Auth-Type = EAP>] (from client swba1-00-test port 0 via TLS tunnel)<br />
Sun Aug 15 10:01:44 2010 : Auth: Login incorrect: [jan/<via Auth-Type = EAP>] (from client swba1-00-test port 50043 cli 00-08-74-46-34-F7)</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">The last two entries are due to the crappy windows client. If auth fails once, it thinks, that the saved</p>
<p style="margin: 0px;">auth info is wrong and deletes it, querying the user to enter mschap(PEAP) login/pw again.</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">The entry Sun Aug 15 10:01:39 2010 is interesting as no client was connected to port 1645 at that time</p>
<p style="margin: 0px;">and the two days before, however it seems as if this triggers the timeout initially.</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">My question: can I somehow extend the timeout or do anything else to prevent this from happening?</p>
</body>
</html>