duplicate errors in an active directory setup

[Christian Pinedo Zamalloa]

Hi all,

I'm using FreeRadius 2.1.8 to authenticate wifi users againts an Active
Directory. The setup consists on samba, kerberos and freeradius. All seem to
be working well but FreeRadius logs are full of the following errors:

Mon Mar 15 18:57:09 2010 : Error: Discarding duplicate request from client
ccc port 32768 - ID: 85 due to unfinished request 28810
Mon Mar 15 18:57:14 2010 : Error: Discarding duplicate request from client
ccc port 32768 - ID: 85 due to unfinished request 28810
Mon Mar 15 18:57:19 2010 : Error: Discarding duplicate request from client
ccc port 32768 - ID: 85 due to unfinished request 28810
Mon Mar 15 18:57:24 2010 : Error: Discarding duplicate request from client
ccc port 32768 - ID: 85 due to unfinished request 28810
Mon Mar 15 18:57:28 2010 : Error: Discarding duplicate request from client
ccc port 32768 - ID: 86 due to unfinished request 28823
Mon Mar 15 18:57:33 2010 : Error: Discarding duplicate request from client
ccc port 32768 - ID: 86 due to unfinished request 28823

I don't know if it is a common issue in a deployment based on active
directory or if something could be wrong. Winbind also gives me a lot of
warning/errors:

Mar 16 16:20:24 radius01 winbindd[2640]: [2010/03/16 16:20:24, 0]
libsmb/credentials.c:creds_client_check(324)
Mar 16 16:20:24 radius01 winbindd[2640]:   creds_client_check: credentials
check failed.
Mar 16 16:20:24 radius01 winbindd[2640]: [2010/03/16 16:20:24, 0]
rpc_client/cli_netlogon.c:rpccli_netlogon_sam_network_logon(1019)
Mar 16 16:20:24 radius01 winbindd[2640]:
rpccli_netlogon_sam_network_logon: credentials chain check failed
Mar 16 16:20:24 radius01 winbindd[2640]: [2010/03/16 16:20:24, 0]
libsmb/cliconnect.c:cli_session_setup_spnego(859)
Mar 16 16:20:24 radius01 winbindd[2640]:   Kinit failed: KDC reply did not
match expectations
Mar 16 16:22:59 radius01 winbindd[19653]: [2010/03/16 16:22:59, 0]
libsmb/cliconnect.c:cli_session_setup_spnego(859)
Mar 16 16:22:59 radius01 winbindd[19653]:   Kinit failed: KDC reply did not
match expectations
Mar 16 16:22:59 radius01 winbindd[2640]: [2010/03/16 16:22:59, 0]
libsmb/credentials.c:creds_client_check(324)
Mar 16 16:22:59 radius01 winbindd[2640]:   creds_client_check: credentials
check failed.
Mar 16 16:22:59 radius01 winbindd[2640]: [2010/03/16 16:22:59, 0]
rpc_client/cli_netlogon.c:rpccli_netlogon_sam_network_logon(1019)
Mar 16 16:22:59 radius01 winbindd[2640]:
rpccli_netlogon_sam_network_logon: credentials chain check failed
Mar 16 16:22:59 radius01 winbindd[2640]: [2010/03/16 16:22:59, 0]
libsmb/cliconnect.c:cli_session_setup_spnego(859)
Mar 16 16:22:59 radius01 winbindd[2640]:   Kinit failed: KDC reply did not
match expectations
Mar 16 16:27:59 radius01 winbindd[19665]: [2010/03/16 16:27:59, 0]
libsmb/cliconnect.c:cli_session_setup_spnego(859)
Mar 16 16:27:59 radius01 winbindd[19665]:   Kinit failed: KDC reply did not
match expectations
Mar 16 16:33:00 radius01 winbindd[19731]: [2010/03/16 16:33:00, 0]
libsmb/cliconnect.c:cli_session_setup_spnego(859)
Mar 16 16:33:00 radius01 winbindd[19731]:   Kinit failed: KDC reply did not
match expectations

Authentication is working but i don't know if i should be worried about
these logs. Can you tell me? Thanks in advance,

-- 
Christian Pinedo Zamalloa (zako)
PGP keyID: 0x828D0C80
Fingerprint: 7BFF 4105 F46B 7977 BD96  348C 1007 4FF8 828D 0C80
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100316/e31f3794/attachment.html>