EAP session matching the State variable

marco perugini m.perugini at 4it.it
Mon Nov 2 11:32:01 CET 2009


Alan DeKok ha scritto:
> marco perugini wrote:
>   
>> hi list, i use freeradius [v 2.1.1] in wimax context and from yesterday
>> this message is driving me crazy: "EAP session matching the State variable".
>>     
>
>   That's "NO eap session matching..."
>
>   
>> here's the use-case: i do auth and connection all right but if/when i lost my
>> connection and i try to reconnect that massage shows me up in radius' debug;
>>     
>
>   Then your supplicant and/or access point is broken.  If the supplicant
> loses association with the AP, then EAP *must* be re-started from
> scratch.  Re-using State attributes from previous EAP sessions will
> cause authentication to fail on *every* single RADIUS server that exists.
>   
hi alan! thank for your feedback, kind as usual..
is there a way to restart eap session? is there some script to run to
have EAP
restarted from scratch?

best regards, marco
>   
>> in about 20 min i succeed in reconnecting. i thought radius was stateless..
>>     
>
>   No.  EAP requires state.  The AP maintains state for EAP sessions.
>
>   
>> do you know if there is some config changes to do to avoid this trouble?
>>     
>
>   Fix the AP so that it doesn't re-use old State attributes.
>
>   Alan DeKok.
>
>   

-- 

4it

	

*4IT **S.r.l.
**Marco Perugini* *| system administrator** *
---------------------------------------------------------
Via Udine 30-36, 00161 Roma
Phone +39 06 97601680
Mobile +39 339.39.81.246
Fax +39 06 97601683
m.perugini at 4it.it <mailto:m.perugini at 4it.it>
www.4it.it <http://www.4it.it/>

"Il presente messaggio e gli eventuali allegati sono di natura
confidenziale. Qualora vi fosse pervenuto per errore, vi preghiamo di
cancellarlo immediatamente dal vostro sistema e di avvisare il mittente.
Grazie."

"This electronic mail transmission and any accompanying attachments
contain confidential information. If you have received this
communication in error, please immediately delete the E-mail and either
notify the sender. Thank you."


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091102/e18464e6/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graphics1
Type: image/jpeg
Size: 2030 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091102/e18464e6/attachment.jpe>


More information about the Freeradius-Users mailing list