Alan DeKok <aland@deployingradius.com> w dniu 09.09.2019, o godz. 15:43: It *does* show you what the server is doing, and *why* it added attributes to Access-Accept.
So, I've run a couple of tests (roaming between clients) with cache disabled and enabled. Cache disabled debug: (11) eap: Expiring EAP session with state 0x8afdaa7a8369b374 (11) eap: Finished EAP session with state 0x8afdaa7a8369b374 (11) eap: Previous EAP request found for state 0x8afdaa7a8369b374, released from the list (11) eap: Peer sent packet with method EAP PEAP (25) (11) eap: Calling submodule eap_peap to process data (11) eap_peap: Continuing EAP-TLS (11) eap_peap: [eaptls verify] = ok (11) eap_peap: Done initial handshake (11) eap_peap: [eaptls process] = ok (11) eap_peap: Session established. Decoding tunneled attributes (11) eap_peap: PEAP state send tlv success (11) eap_peap: Received EAP-TLV response (11) eap_peap: Success (11) eap_peap: Using saved attributes from the original Access-Accept (11) eap_peap: Session-Timeout = 86400 (11) eap_peap: Termination-Action = RADIUS-Request (11) eap_peap: Fall-Through = Yes (11) eap_peap: Acct-Interim-Interval = 300 (11) eap_peap: Tunnel-Type = VLAN (11) eap_peap: Tunnel-Medium-Type = IEEE-802 (11) eap_peap: Tunnel-Private-Group-Id = "14" (11) eap_peap: User-Name = "Martin" (11) eap: Sending EAP Success (code 3) ID 148 length 4 (11) eap: Freeing handler (11) [eap] = ok (11) } # authenticate = ok Cache enabled debug: (18) eap: Expiring EAP session with state 0x9049ed0d92dcf470 (18) eap: Finished EAP session with state 0x9049ed0d92dcf470 (18) eap: Previous EAP request found for state 0x9049ed0d92dcf470, released from the list (18) eap: Peer sent packet with method EAP PEAP (25) (18) eap: Calling submodule eap_peap to process data (18) eap_peap: Continuing EAP-TLS (18) eap_peap: [eaptls verify] = ok (18) eap_peap: Done initial handshake (18) eap_peap: [eaptls process] = ok (18) eap_peap: Session established. Decoding tunneled attributes (18) eap_peap: PEAP state send tlv success (18) eap_peap: Received EAP-TLV response (18) eap_peap: Success (18) eap_peap: No saved attributes in the original Access-Accept (18) eap_peap: &request:EAP-Session-Resumed := 1 (18) eap: Sending EAP Success (code 3) ID 149 length 4 (18) eap: Freeing handler (18) [eap] = ok (18) } # authenticate = ok Without cache, all AVP are retrieved from sql; with cache that step is skipped and cache doesn’t save AVP. If it’s required, I can post full debug or attached it as file ;-) Any ideas what might be going wrong with saving AVP in cache?