Help troubleshooting No EAP session matching...

Alan DeKok aland at
Thu Sep 15 16:22:56 CEST 2016

On Sep 15, 2016, at 10:21 AM, Matthew Newton <mcn4 at> wrote:
> In my experience, around 30-40... but does depend on hardware.
> Could try using libwbclient with recent FreeRADIUS - see
> winbind_username/winbind_domain in mods-available/mschap. It might
> help; it should be a bit quicker than calling out to ntlm_auth.
> Recent versions of Samba should be better as well IIRC.

  Even better, enable TLS session caching.  It's easier to do in v3.1.x, but even v3.0.x should be OK.

  That takes the load off of AD, and also FreeRADIUS.  I've seen many 1000's of sessions resumed per second.

  Alan DeKok.

More information about the Freeradius-Users mailing list