duplicate requests...
--------------------------------- Bollywood, fun, friendship, sports and more... you name it, we have it.
To: free radius <freeradius-devel@lists.freeradius.org> Subject: duplicate requests... Date: Thu, 28 Jun 2007 06:03:01 +0100 (BST)
Hi all....
In the file radiusd.c, i am not able to understand the following... what is "fake request" and what is duplicate requests??????? when a request is considered as duplicate???
You've already posted this to the freeradius-devel list - don't repost it here please. This list is for questions about *using* FreeRadius
There is not much to add to the explanations in the code. Ivan Kalik Kalik Informatika ISP Dana 28/6/2007, "suganthi velusamy" <v.suganthi@yahoo.co.in> piše:
Hi all....
In the file radiusd.c, i am not able to understand the following... what is "fake request" and what is duplicate requests??????? when a request is considered as duplicate???
/* * "fake" requests MUST NEVER be in the request list. * * They're used internally in the server. Any reply * is a reply to the local server, and any proxied packet * gets sent outside of the tunnel. */ rad_assert((curreq->options & RAD_REQUEST_OPTION_FAKE_REQUEST) == 0);
/* * The current request isn't finished, which * means that the NAS sent us a new packet, while * we are still processing the old request. */ if (!curreq->finished) { /* * If the authentication vectors are identical, * then the NAS is re-transmitting it, trying to * kick us into responding to the request. */ if (memcmp(curreq->packet->vector, packet->vector, sizeof(packet->vector)) == 0) { RAD_SNMP_INC(rad_snmp.auth.total_dup_requests);
/* /* * It's not finished because the request * was proxied, but there was no reply * from the home server. */ if (curreq->proxy && !curreq->proxy_reply) { /* * We're taking care of sending * duplicate proxied packets, so * we ignore any duplicate * requests from the NAS. * * FIXME: Make it ALWAYS synchronous! */ if (!mainconfig.proxy_synchronous) { RAD_SNMP_TYPE_INC(listener, total_packets_dropped); DEBUG2("Ignoring duplicate packet from client " "%s:%d - ID: %d, due to outstanding proxied request %d.", client_name(packet->src_ipaddr), packet->src_port, packet->id, curreq->number);
Thanks....
--------------------------------- Once upon a time there was 1 GB storage on Yahoo! Mail. Click here for happy ending!
You (should) already have a DEFAULT entry (profile) in users file for Service-Type Framed-User. Just add Ascend-Data-Filter, Port-Limit etc. entries to it. That is if by "default profile" you mean one that should apply to everyone. If not, you will need to create groups and apply DEFAULT profile to them. Ivan Kalik Kalik Informatika ISP Dana 28/6/2007, "suganthi velusamy" <v.suganthi@yahoo.co.in> piše:
Hi all....
In the file radiusd.c, i am not able to understand the following... what is "fake request" and what is duplicate requests??????? when a request is considered as duplicate???
/* * "fake" requests MUST NEVER be in the request list. * * They're used internally in the server. Any reply * is a reply to the local server, and any proxied packet * gets sent outside of the tunnel. */ rad_assert((curreq->options & RAD_REQUEST_OPTION_FAKE_REQUEST) == 0);
/* * The current request isn't finished, which * means that the NAS sent us a new packet, while * we are still processing the old request. */ if (!curreq->finished) { /* * If the authentication vectors are identical, * then the NAS is re-transmitting it, trying to * kick us into responding to the request. */ if (memcmp(curreq->packet->vector, packet->vector, sizeof(packet->vector)) == 0) { RAD_SNMP_INC(rad_snmp.auth.total_dup_requests);
/* /* * It's not finished because the request * was proxied, but there was no reply * from the home server. */ if (curreq->proxy && !curreq->proxy_reply) { /* * We're taking care of sending * duplicate proxied packets, so * we ignore any duplicate * requests from the NAS. * * FIXME: Make it ALWAYS synchronous! */ if (!mainconfig.proxy_synchronous) { RAD_SNMP_TYPE_INC(listener, total_packets_dropped); DEBUG2("Ignoring duplicate packet from client " "%s:%d - ID: %d, due to outstanding proxied request %d.", client_name(packet->src_ipaddr), packet->src_port, packet->id, curreq->number);
Thanks....
--------------------------------- Once upon a time there was 1 GB storage on Yahoo! Mail. Click here for happy ending!
participants (3)
-
Phil Mayers -
suganthi velusamy -
tnt@kalik.co.yu