No EAP session matching the State variable (and other various messages)

[A.L.M.Buxey at lboro.ac.uk]

Hi,

> Sep 30 12:56:36 newdvlanb radiusd[10152]: rlm_eap: No EAP session
> matching the State variable.
> Sep 30 12:00:21 dvlanc radiusd[16053]: WARNING: Child is hung for
> request 782076 in component authenticate module peap.
> Sep 30 12:57:08 newdvlanb radiusd[10152]: Discarding duplicate
> request from client resnet1-WiSM-A port 32770 - ID: 126 due to
> unfinished request 187554
> Sep 30 12:58:24 newdvlanb radiusd[10152]: Discarding conflicting
> packet from client Rich-core-WiSM-E port 32769 - ID: 155 due to
> recent request 207181.

> Any one have any similar battle scars that I can learn from (server
> performance tweaks, optimizations, etc?). I've optimized as best I
> can the SQL component. This all seems related to the
> samba/winbind/ntlm_auth.

we are always in a battle with performance and load. you've already had a pretty
good description of what the messages mean but I can offer another possible
cause - in the PEAP module hang - I would suspect that you have the MSCHAP retry
password option set? if so, you're waiting for the user to get around to
typing in their details again...and again and again as they get it wrong
or typo-fixed by their smartphone or tablet.  we see similar messages
at busy times of new devices (like start of year)

alan