intermittent auth issue (proxy: request is no longer in proxy hash)

[Alan DeKok]

Chris Knipe wrote:
> For some reason, the response received does not make it through
> post_proxy.  From what I can gather in the logs, FR complains:
> 
> Thu Jul  3 11:55:49 2014 : Debug: (216) proxy: request is no longer in
> proxy hash

  That's the issue.  The original request has timed out, and has been
removed from the list of outstanding proxied packets.

  RADIUS isn't perfect.  If a request takes too long, the client can
give up on it.  When the home server finally responds, the proxy
discovers that there is no place for the response to go.

> And then of course, never passes the request off through rlm_perl.

  Because there's no reason to do that.  In fact, the only thing that
the proxy can do is to discard the response.

> Can anyone shed some light on this in terms of how to fix this?

  Make sure that the home server (and the proxy) process packets in a
timely manner.

  Alan DeKok.