FR 2.1.8 Issue - Unjustified(?) Access-Rejects.
Palmer J.D.F.
J.D.F.Palmer at swansea.ac.uk
Wed Jan 13 11:32:21 CET 2010
> > Whether this has any bearing on it I'm not sure, but this seems to
be
> > affecting users that use wpa_supplicant more, though Windows users
> have
> > also reported the problem.
>
> The sessions *also* have a timeout. Read eap.conf.
>
Do you mean under the cache directive?
If so that is set to 48 hours, yet failure occurred within 30 minutes.
Our wireless controllers have a 1800 second client session timeout,
forcing a reauth every 30 mins.
Below is an excerpt of the radpostauth table for an affected user, it
shows the user re-authing every 30 mins though the night.
I migrated back to 2.1.8 (from 2.1.7) at 08:41 this morning. The client
reauthed successfully once after the reload at 08:48, but then fails at
the first 30min session timeout after that.
3843824 554694 at swansea.ac.uk Access-Accept
2010-01-13 02:17:26
3845505 554694 at swansea.ac.uk Access-Accept
2010-01-13 02:47:26
3846902 554694 at swansea.ac.uk Access-Accept
2010-01-13 03:17:26
3848181 554694 at swansea.ac.uk Access-Accept
2010-01-13 03:47:26
3849298 554694 at swansea.ac.uk Access-Accept
2010-01-13 04:17:26
3850365 554694 at swansea.ac.uk Access-Accept
2010-01-13 04:47:26
3851351 554694 at swansea.ac.uk Access-Accept
2010-01-13 05:17:51
3852249 554694 at swansea.ac.uk Access-Accept
2010-01-13 05:47:51
3853197 554694 at swansea.ac.uk Access-Accept
2010-01-13 06:17:51
3854151 554694 at swansea.ac.uk Access-Accept
2010-01-13 06:47:51
3855154 554694 at swansea.ac.uk Access-Accept
2010-01-13 07:17:51
3856266 554694 at swansea.ac.uk Access-Accept
2010-01-13 07:47:51
3857449 554694 at swansea.ac.uk Access-Accept
2010-01-13 08:18:16
3858680 554694 at swansea.ac.uk Access-Accept
2010-01-13 08:48:16
3860025 554694 at swansea.ac.uk Access-Reject
2010-01-13 09:18:16
3860091 554694 at swansea.ac.uk Access-Reject
2010-01-13 09:19:37
3860144 554694 at swansea.ac.uk Access-Reject
2010-01-13 09:20:58
3860165 554694 at swansea.ac.uk Access-Reject
2010-01-13 09:21:23
Thanks,
Jezz.
More information about the Freeradius-Users
mailing list