On 6/12/07, Andrew Long <along@escapewire.com> wrote:
I am getting slow response time from the server for authentication requests (chap/mschap) that eventually fail (users submitting wrong password). The problem is that the NAS is sending about 3 requests before getting a response. By the time the deny arrives, it is out of order and the NAS logs an unexpected packet (though it correctly denies the user). I am wondering if disabling all authentication/authorization methods except chap/mschap would solve this by speeding the response time. The server is not the speediest machine...
I suggest you should upgrade to version 1.1.6. Also, try runninng the radiusd process with the -X option and post the output here. Other than that, are you checking the users against an sql or ldap server? If ldap, is the uid indexed?