Panagiotis Georgopoulos <panos@comp.lancs.ac.uk> wrote:
#Debug: SSL: adding session 5705534d65ddd08de3b8649528274c1bc4e3d648bef7b643ffaf0f647afcac73 to cache
... what I never ever see though is to try and do session resumption (i.e. see "Skipping Phase2 due to session resumption"). How can I fix/debug that?
Is anyone using session resumption successfully in 2.1.10?
Sorry for the late reply, just tested it now and it works fine for me in 2.1.10. ---- Found Auth-Type = EAP # Executing group from file /etc/freeradius/sites-enabled/lanwarden +- entering group EAP {...} [EAP] Request found, released from the list [EAP] EAP/ttls [EAP] processing type ttls [ttls] Authenticate [ttls] processing EAP-TLS [ttls] eaptls_verify returned 7 [ttls] Done initial handshake [ttls] <<< TLS 1.0 ChangeCipherSpec [length 0001] [ttls] <<< TLS 1.0 Handshake [length 0010], Finished [ttls] TLS_accept: SSLv3 read finished A [ttls] (other): SSL negotiation finished successfully SSL Connection Established SSL Application Data [ttls] eaptls_process returned 3 [ttls] Skipping Phase2 due to session resumption [ttls] Adding cached attributes to the reply: User-Name = "ac56@soas.ac.uk" Stripped-User-Name = "" [EAP] Freeing handler ++[EAP] returns ok [snipped] [detail.lanwarden] expand: /var/log/freeradius/radacct/detail.lanwarden.%Y%m%d -> /var/log/freeradius/radacct/detail.lanwarden.20101005 [detail.lanwarden] /var/log/freeradius/radacct/detail.lanwarden.%Y%m%d expands to /var/log/freeradius/radacct/detail.lanwarden.20101005 [detail.lanwarden] expand: %t (%{Packet-Src-IP-Address}:%{Packet-Src-Port} -> %{Packet-Dst-IP-Address}:%{Packet-Dst-Port}) -> Tue Oct 5 10:19:28 2010 (172.16.3.124:32768 -> 212.219.238.4:1812) ++[detail.lanwarden] returns ok } # server lanwarden Sending Access-Accept of id 23 to 172.16.3.124 port 32768 Session-Timeout = 30 Termination-Action = RADIUS-Request MS-MPPE-Send-Key = <trim> Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN Operator-Name = "1soas.ac.uk" Message-Authenticator = 0x00000000000000000000000000000000 Acct-Interim-Interval = 600 User-Name = "ac56@soas.ac.uk" MS-MPPE-Recv-Key = <trim> EAP-Message = 0x03030004 Tunnel-Private-Group-Id:0 = "" Finished request 11. ---- Cheers -- Alexander Clouter .sigmonster says: Robustness, adj.: Never having to say you're sorry.