--On 04 March 2011 12:34 -0500 John Douglass <john.douglass@oit.gatech.edu> wrote:
Group,
Recently, my AD servers were patched by another support group and this caused a (small but noticeable) service outage for our WPA radius services (Radius 2.1.9)
I can think of two things to investigate: * Recent Samba can do winbind credential caching IIRC - I haven't experimented with this so I'm not sure if it will work for this application. * Enable Fast Session Resumption: <https://github.com/alandekok/freeradius-server/blob/master/raddb/modules/eap#L312> ... We dropped the hits on our DCs by > 40% by doing this. N.B Resumed sessions will not touch your inner-tunnel config, so you have to make sure that you pay attention when (re-)assigning VLANs / other returned attributes based on username. -James -- James J J Hooper Network Specialist, University of Bristol http://www.wireless.bristol.ac.uk --