[SOLVED] duplicate errors in an active directory setup

[Christian Pinedo Zamalloa]

After some debug I discovered that it was not an authentication problem but
an accounting problem. I was doing a proxy to store accounting data in a
remote radius server, but port 1813 of that radius server was shutdown and
so my server tried to send accouting information without success until
timeout.

After several seconds without response the radius client sent again the same
radius request to my server and it was discarded generating the errors logs
because it was trying to proxy the request to the remote server.

Thanks for your help, it has been very helpful

2010/3/17 Christian Pinedo Zamalloa <chr.pinedo at gmail.com>

> It is strange because ntlm_auth is working, is the only method to
> authenticate users to access WiFi network and all the days are 20-30 users
> connected. I think that could be something related to a network issue or an
> active directory issue.
>
> 2010/3/16 Alan Buxey <A.L.M.Buxey at lboro.ac.uk>
>
> Hi,
>>
>> > Mon Mar 15 18:57:09 2010 : Error: Discarding duplicate request from
>> client ccc port 32768 - ID: 85 due to unfinished request 28810
>> > Mon Mar 15 18:57:14 2010 : Error: Discarding duplicate request from
>> client ccc port 32768 - ID: 85 due to unfinished request 28810
>> > Mon Mar 15 18:57:19 2010 : Error: Discarding duplicate request from
>> client ccc port 32768 - ID: 85 due to unfinished request 28810
>> > Mon Mar 15 18:57:24 2010 : Error: Discarding duplicate request from
>> client ccc port 32768 - ID: 85 due to unfinished request 28810
>> > Mon Mar 15 18:57:28 2010 : Error: Discarding duplicate request from
>> client ccc port 32768 - ID: 86 due to unfinished request 28823
>> > Mon Mar 15 18:57:33 2010 : Error: Discarding duplicate request from
>> client ccc port 32768 - ID: 86 due to unfinished request 28823
>>
>> something is blocking the threads.... you may ned to increase debugging to
>> see what/where.
>>
>> >
>> > I don't know if it is a common issue in a deployment based on active
>> directory or if something could be wrong. Winbind also gives me a lot of
>> warning/errors:
>> i
>>
>> those are a ncie load of errors. does using 'kinit' work?  does using
>> ntlm_auth work?
>>
>> alan
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>
>
>
> --
> Christian Pinedo Zamalloa (zako)
> PGP keyID: 0x828D0C80
> Fingerprint: 7BFF 4105 F46B 7977 BD96  348C 1007 4FF8 828D 0C80
>



-- 
Christian Pinedo Zamalloa (zako)
PGP keyID: 0x828D0C80
Fingerprint: 7BFF 4105 F46B 7977 BD96  348C 1007 4FF8 828D 0C80
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100329/7b409bf7/attachment.html>