28 Jul
2016
28 Jul
'16
7:38 a.m.
On Jul 27, 2016, at 8:24 PM, L Wu via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I recently noticed that the freeradius server checks duplicated requests by comparing length and authenticator. This is fine with authentication request because the Authenticator field in Access-Request is a random number. However, in Accounting-Request, the Authenticator is MD5-hashed with same info, unless length is different (assuming same other attributes info.). If length is the same, this way, there is basically no duplicate packet check.
If the accounting packets are identical, then they are duplicates. Alan DeKok.