Brian Julin <BJulin@clarku.edu> w dniu 09.09.2019, o godz. 16:08: Is it possible that this is the first device that you have used on you network that actually does fast reauthentication? Many devices won't unless you tell them to. Most devices are pretty new (1 to 2 years old) so, I don’t think it’s the case.
If that's the case you're not saving the necessary authorization attributes into the cache or pulling them back out. This is a bit complicated to do, as some of them may be determined inside the inner tunnel.
That’s what I think to be happening. Today I’ve disabled cache and all came back to normal. One more thing, with cache enabled, another device had problems to login - kept getting message about wrong password every couple of logins... As I haven't had much time recently, I’m going to run tests with cache enabled in next days, then I’ll post debug as well.