Error: "Discarding duplicate request..."

Phil Mayers p.mayers at imperial.ac.uk
Thu Sep 16 16:39:19 CEST 2010


On 16/09/10 15:27, Mike Diggins wrote:
>
> I am running NTLM_AUTH for mschap authentication with an MS AD at the back
> end. I suppose that could be the culprit. If so, is upgrading FreeRadius
> likely to resolve that (not knowing exactly what the problem is). Anything
> I could configure at the FreeRadius end to make that work a bit better?

It would be a bit surprising for ntlm_auth to take that long, unless 
your AD controllers are very heavily loaded or are very distant. It 
takes ~30 milliseconds to auth a user/challenge pair in our installation.

You could try restarting winbind - maybe it's gone crazy or eaten a load 
of RAM or something.

If it is ntlm_auth, upgrading FreeRadius probably won't help (unless you 
take advantage of the SSL session resumption available in later versions 
to avoid doing some of the auths on re-auth)



More information about the Freeradius-Users mailing list