Hi! After running FR 3.0.3 from GIT (FR 3.0.2 as well) for a while (a few hours) lots of “Error: rlm_eap (EAP): No EAP session matching state 0x…” appear in the log file. A restart of FR and the error messages are gone for the present. These requests come from RADIUS over TLS (radsec) clients explained in /etc/freeradius/sites-available/tls Is this a bug or a misconfiguration? Best wishes Michael Fri Jun 13 09:30:53 2014 : Auth: (10040) Login incorrect: [userxy@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 13 cli 58-55-ca-f8-50-67) Fri Jun 13 09:30:53 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x7c19d06a7714c91d Fri Jun 13 09:30:59 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x7c19d06a7714c91d Fri Jun 13 09:30:59 2014 : Auth: (10041) Login incorrect: [userxy@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 58-55-ca-f8-50-67) Fri Jun 13 09:30:59 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x7c19d06a7714c91d Fri Jun 13 09:31:20 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x6d7d7a2a6d6d63c6 Fri Jun 13 09:31:20 2014 : Auth: (10045) Login incorrect: [userxy@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 13 cli 58-55-ca-f8-50-67) Fri Jun 13 09:31:20 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x6d7d7a2a6d6d63c6 Fri Jun 13 09:31:27 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x6d7d7a2a6d6d63c6 Fri Jun 13 09:31:27 2014 : Auth: (10047) Login incorrect: [userxy@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 58-55-ca-f8-50-67) Fri Jun 13 09:31:27 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x6d7d7a2a6d6d63c6 Fri Jun 13 09:31:37 2014 : Auth: (10098) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc via TLS tunnel) Fri Jun 13 09:31:37 2014 : Auth: (10099) Login OK: [userxy@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 58-55-ca-f8-50-67 via TLS tunnel) Fri Jun 13 09:31:37 2014 : Auth: (10100) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc) Fri Jun 13 09:31:38 2014 : Auth: (10101) Login OK: [userxy@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 58-55-ca-f8-50-67) Fri Jun 13 09:32:18 2014 : Auth: (10152) Login OK: [userxy@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 58-55-ca-f8-50-67 via TLS tunnel) Fri Jun 13 09:32:18 2014 : Auth: (10154) Login OK: [userxy@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 58-55-ca-f8-50-67) Fri Jun 13 09:32:28 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x31cdab6e35cbb2ff Fri Jun 13 09:32:28 2014 : Auth: (10170) Login incorrect: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc) Fri Jun 13 09:32:28 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x31cdab6e35cbb2ff Fri Jun 13 09:32:40 2014 : Error: rlm_eap (EAP): No EAP session matching state 0xead9ddeceadbc462 Fri Jun 13 09:32:40 2014 : Auth: (10203) Login incorrect: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc) Fri Jun 13 09:32:40 2014 : Error: rlm_eap (EAP): No EAP session matching state 0xead9ddeceadbc462 Fri Jun 13 09:32:50 2014 : Error: rlm_eap (EAP): No EAP session matching state 0xead9ddeceadbc462 Fri Jun 13 09:32:50 2014 : Auth: (10207) Login incorrect: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc) Fri Jun 13 09:32:50 2014 : Error: rlm_eap (EAP): No EAP session matching state 0xead9ddeceadbc462 Fri Jun 13 09:32:53 2014 : Error: rlm_eap (EAP): No EAP session matching state 0xead9ddeceadbc462 Fri Jun 13 09:32:53 2014 : Auth: (10208) Login incorrect: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc) Fri Jun 13 09:32:53 2014 : Error: rlm_eap (EAP): No EAP session matching state 0xead9ddeceadbc462 Fri Jun 13 09:36:25 2014 : Auth: (10471) Login OK: [userxz@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 132 cli 68-A8-6D-0E-E4-CE via TLS tunnel) Fri Jun 13 09:36:25 2014 : Auth: (10472) Login OK: [user128@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 14088 cli 84-7A-88-75-92-4E via TLS tunnel) Fri Jun 13 09:36:25 2014 : Auth: (10473) Login OK: [userxz@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 132 cli 68-A8-6D-0E-E4-CE) Fri Jun 13 09:36:27 2014 : Auth: (10474) Login OK: [user128@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 14088 cli 84-7A-88-75-92-4E) Fri Jun 13 09:40:45 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x2acecbf92accd2dc Fri Jun 13 09:40:45 2014 : Auth: (10853) Login incorrect: [user207@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 84-fc-fe-c5-17-ab) Fri Jun 13 09:40:45 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x2acecbf92accd2dc Fri Jun 13 09:40:48 2014 : Auth: (10876) Login OK: [user207@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 84-fc-fe-c5-17-ab via TLS tunnel) Fri Jun 13 09:40:48 2014 : Auth: (10877) Login OK: [user810@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 0 via TLS tunnel) Fri Jun 13 09:40:48 2014 : Auth: (10878) Login OK: [user207@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 84-fc-fe-c5-17-ab) Fri Jun 13 09:41:08 2014 : Auth: (10913) Login OK: [user810@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 0 via TLS tunnel) Fri Jun 13 09:41:08 2014 : Auth: (10914) Login OK: [user810@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 0) Fri Jun 13 09:41:14 2014 : Auth: (10927) Login OK: [user810@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 0) Fri Jun 13 09:43:05 2014 : Auth: (11158) Login OK: [user810@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 0 via TLS tunnel) Fri Jun 13 09:43:05 2014 : Auth: (11159) Login OK: [user810@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 0) Fri Jun 13 09:43:25 2014 : Auth: (11213) Login OK: [user810@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 0 via TLS tunnel) Fri Jun 13 09:43:25 2014 : Auth: (11214) Login OK: [user810@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 0) Fri Jun 13 09:44:41 2014 : Error: rlm_eap (EAP): No EAP session matching state 0xc147e16bc145f804 Fri Jun 13 09:44:41 2014 : Auth: (11385) Login incorrect: [user207@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 84-fc-fe-c5-17-ab) Fri Jun 13 09:44:41 2014 : Error: rlm_eap (EAP): No EAP session matching state 0xc147e16bc145f804 Fri Jun 13 09:44:46 2014 : Auth: (11422) Login OK: [user207@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 84-fc-fe-c5-17-ab via TLS tunnel) Fri Jun 13 09:44:46 2014 : Auth: (11423) Login OK: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c via TLS tunnel) Fri Jun 13 09:44:46 2014 : Auth: (11424) Login OK: [user207@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 84-fc-fe-c5-17-ab) Fri Jun 13 09:44:56 2014 : Auth: (11445) Login OK: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c) Fri Jun 13 09:45:17 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x77b7713e7ca66843 Fri Jun 13 09:45:17 2014 : Auth: (11503) Login incorrect: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c) Fri Jun 13 09:45:17 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x77b7713e7ca66843 Fri Jun 13 09:45:21 2014 : Auth: (11537) Login OK: [user207@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 84-fc-fe-c5-17-ab via TLS tunnel) Fri Jun 13 09:45:21 2014 : Auth: (11538) Login OK: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c via TLS tunnel) Fri Jun 13 09:45:21 2014 : Auth: (11539) Login OK: [user207@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13 cli 84-fc-fe-c5-17-ab) Fri Jun 13 09:45:31 2014 : Auth: (11570) Login OK: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c) Fri Jun 13 09:45:49 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x58b807b453a81e77 Fri Jun 13 09:45:49 2014 : Auth: (11605) Login incorrect: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c) Fri Jun 13 09:45:49 2014 : Error: rlm_eap (EAP): No EAP session matching state 0x58b807b453a81e77 [RESTART FR] Fri Jun 13 09:53:23 2014 : Info: Signalled to terminate Fri Jun 13 09:53:23 2014 : Info: Exiting normally Fri Jun 13 09:53:23 2014 : Info: rlm_ldap (ldap): Closing connection (0) Fri Jun 13 09:53:24 2014 : Info: rlm_ldap (ldap): Opening additional connection (0) Fri Jun 13 09:53:24 2014 : Info: Loaded virtual server <default> Fri Jun 13 09:53:24 2014 : Info: Loaded virtual server default Fri Jun 13 09:53:24 2014 : Info: Loaded virtual server inner-tunnel Fri Jun 13 09:53:24 2014 : Info: Ready to process requests Fri Jun 13 09:53:25 2014 : Info: ... adding new socket auth+acct from client (192.168.71.138, 45129) -> (*, 2083, virtual-server=default) Fri Jun 13 09:53:26 2014 : Info: ... adding new socket auth+acct from client (192.168.71.134, 53659) -> (*, 2083, virtual-server=default) Fri Jun 13 09:53:46 2014 : Auth: (89) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 331 cli CC-3A-61-6C-9E-60 via TLS tunnel) Fri Jun 13 09:53:46 2014 : Auth: (90) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 331 cli CC-3A-61-6C-9E-60) Fri Jun 13 09:54:27 2014 : Auth: (159) Login OK: [userxz@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 142 cli 68-A8-6D-0E-E4-CE via TLS tunnel) Fri Jun 13 09:54:27 2014 : Auth: (160) Login OK: [userxz@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 142 cli 68-A8-6D-0E-E4-CE) Fri Jun 13 09:54:39 2014 : Auth: (183) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 13302 cli CC-3A-61-6C-9E-60 via TLS tunnel) Fri Jun 13 09:54:39 2014 : Auth: (184) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 13302 cli CC-3A-61-6C-9E-60) Fri Jun 13 09:55:34 2014 : Auth: (235) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 48802 cli cc3a.616c.9e60 via TLS tunnel) Fri Jun 13 09:55:34 2014 : Auth: (237) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 48802 cli cc3a.616c.9e60) Fri Jun 13 09:55:40 2014 : Info: ... adding new socket proxy (132.195.90.135, 40115) -> home_server (192.168.71.134, 2083) Fri Jun 13 09:56:33 2014 : Auth: (363) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 34070 cli cc3a.616c.9e60 via TLS tunnel) Fri Jun 13 09:56:33 2014 : Auth: (364) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 34070 cli cc3a.616c.9e60) Fri Jun 13 09:59:03 2014 : Auth: (590) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 61201 cli cc3a.616c.9e60 via TLS tunnel) Fri Jun 13 09:59:03 2014 : Auth: (591) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 61201 cli cc3a.616c.9e60) Fri Jun 13 09:59:06 2014 : Info: rlm_ldap (ldap): Opening additional connection (1) Fri Jun 13 09:59:06 2014 : Auth: (615) Login OK: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c via TLS tunnel) Fri Jun 13 09:59:06 2014 : Auth: (617) Login OK: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c) Fri Jun 13 09:59:07 2014 : Auth: (630) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 21912 cli CC-3A-61-6C-9E-60 via TLS tunnel) Fri Jun 13 09:59:07 2014 : Auth: (631) Login OK: [user152@uni-wuppertal.de] (from client radius2.eduroamclient.xy port 21912 cli CC-3A-61-6C-9E-60) Fri Jun 13 09:59:37 2014 : Info: rlm_ldap (ldap): Closing connection (0), from 1 unused connections Fri Jun 13 10:02:23 2014 : Auth: (1074) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc via TLS tunnel) Fri Jun 13 10:02:23 2014 : Auth: (1075) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc) Fri Jun 13 10:02:26 2014 : Auth: (1087) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12433 cli FC-25-3F-DC-34-4D via TLS tunnel) Fri Jun 13 10:02:26 2014 : Auth: (1088) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12433 cli FC-25-3F-DC-34-4D) Fri Jun 13 10:02:28 2014 : Auth: (1102) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12433 cli FC-25-3F-DC-34-4D via TLS tunnel) Fri Jun 13 10:02:28 2014 : Auth: (1103) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12433 cli FC-25-3F-DC-34-4D) Fri Jun 13 10:03:12 2014 : Auth: (1187) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12519 cli FC-25-3F-DC-34-4D via TLS tunnel) Fri Jun 13 10:03:12 2014 : Auth: (1188) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12519 cli FC-25-3F-DC-34-4D) Fri Jun 13 10:03:13 2014 : Auth: (1200) Login OK: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c via TLS tunnel) Fri Jun 13 10:03:13 2014 : Auth: (1201) Login OK: [user729@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 1c-4b-d6-f7-b8-0c) Fri Jun 13 10:03:29 2014 : Auth: (1258) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc via TLS tunnel) Fri Jun 13 10:03:29 2014 : Auth: (1259) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc) Fri Jun 13 10:03:30 2014 : Auth: (1272) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc via TLS tunnel) Fri Jun 13 10:03:30 2014 : Auth: (1273) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc) Fri Jun 13 10:03:31 2014 : Auth: (1286) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc via TLS tunnel) Fri Jun 13 10:03:31 2014 : Auth: (1287) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli 90-72-40-dd-6a-cc) Fri Jun 13 10:04:27 2014 : Auth: (1361) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12754 cli FC-25-3F-DC-34-4D via TLS tunnel) Fri Jun 13 10:04:27 2014 : Auth: (1362) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12754 cli FC-25-3F-DC-34-4D) Fri Jun 13 10:05:20 2014 : Auth: (1489) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12964 cli FC-25-3F-DC-34-4D via TLS tunnel) Fri Jun 13 10:05:20 2014 : Auth: (1490) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 12964 cli FC-25-3F-DC-34-4D) Fri Jun 13 10:05:50 2014 : Auth: (1543) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli f0-b4-79-14-a0-7d via TLS tunnel) Fri Jun 13 10:05:50 2014 : Auth: (1544) Login OK: [userxb@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 29 cli f0-b4-79-14-a0-7d) Fri Jun 13 10:06:16 2014 : Auth: (1563) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13158 cli FC-25-3F-DC-34-4D via TLS tunnel) Fri Jun 13 10:06:17 2014 : Auth: (1564) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13158 cli FC-25-3F-DC-34-4D) Fri Jun 13 10:06:21 2014 : Auth: (1579) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13175 cli FC-25-3F-DC-34-4D via TLS tunnel) Fri Jun 13 10:06:21 2014 : Auth: (1580) Login OK: [user932@uni-wuppertal.de] (from client radius1.eduroamclient.xy port 13175 cli FC-25-3F-DC-34-4D) -- --- Dipl.-Ing. Michael Simon ---- Bergische Universität Wuppertal - ZIM ------ Netzwerk- und Systemplanung -------- simon@uni-wuppertal.de --------- Tel. +49 202 439-2235 ---------- Fax. +49 202 439-2910