On Jun 25, 2024, at 8:53 AM, dominic.stalder@unibe.ch wrote:
Thanks a lot, great point; did not know, that we have enabled caching until you mentioned it now! I took over the old FreeRADIUS 3.0 configuration from a former University member and this part was completely "ignored" by me. Just checked the mods-enabled folder and voilà:
/etc/freeradius/mods-enabled/cache_eap
That works, but I suggest using it with care. 99.9% of the time there's no proxy fail-over, so the caching is just extra work. If caching makes a large difference, then the network is unstable enough that it needs fixing.
You see, new to this as well. Can I see cached "authentications" in the logs or can I enable the logging for those (/etc/freeradius/mods-enabled/linelog) somehow?
You'll have to write policies to log the cached packets. But I'd suggest not doing this. Alan DeKok.