17 Apr
2009
17 Apr
'09
10:20 a.m.
Jérôme BERTHIER wrote:
Sorry. It means that when the NAS asks for reauthentification (after reauth-period timeout has expired), clients won't stop trying to re-connect using session resumption option again and again.... Here, an extract from freeradius debug : [ttls] eaptls_process returned 3 [ttls] Skipping Phase2 due to session resumption [ttls] FAIL: Forcibly stopping session resumption as it is not allowed.
What's "reauth-period"? If the session cache is enabled, then the entries should be deleted after "lifetime" hours. Once the entries are deleted, they will not be in the cache, and attempts to re-used the cached session should cause a re-negotiation. Alan DeKok.