Hi,
Hmm... 2.2.1 is also behaving unclean at my site. I keep getting:
right, too early in the morning. I may have jumped on that bandwaggon too quickly. We do see a significant increase in the below, but it seems "normal" in the sense that people are back to school and more inquisitive uninformed people trigger these... xlat fails because the User-Name doesn't exist in the DB (typo etc.) and there is no SSHA1 password to mangle. EAP session states go lost after about 9 round-trips of packets. 9 roundtrips is +- the time when asked for the username+password when outer TLS is set up, so there may be new users having no clue, and go searching for what to enter for more than the 120 (!) seconds I've set session matching timeout to. Stefan
Mon Sep 23 08:01:17 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:17 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:17 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:17 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:17 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:18 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:19 2013 : Error: rlm_expr: xlat failed. Mon Sep 23 08:01:19 2013 : Error: rlm_expr: xlat failed. Mon Sep 23 08:01:21 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:21 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:21 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:21 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:21 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:21 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:21 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:21 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:21 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:23 2013 : Error: rlm_expr: xlat failed. Mon Sep 23 08:01:30 2013 : Error: rlm_expr: xlat failed. Mon Sep 23 08:01:33 2013 : Error: rlm_expr: xlat failed. Mon Sep 23 08:01:36 2013 : Error: rlm_expr: xlat failed. Mon Sep 23 08:01:38 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:38 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:41 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:41 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:41 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:41 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:41 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:41 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:41 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:41 2013 : Error: rlm_eap: No EAP session matching the State variable. Mon Sep 23 08:01:41 2013 : Error: rlm_eap: No EAP session matching the State variable.
With a config that ran smoothly with 2.2.0 (+the fixes that I needed to get SSHA1 decoding to work in a satisfying way).
I'm rolling back to that patched version now - the errors seem to create intermittent auth failures/timeouts.
Stefan
alan
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66