Session-Timeout Problem

[Matthew Newton]

On Thu, Feb 02, 2017 at 04:31:49PM +0000, Selahattin Cilek wrote:
> "its likely that its eg cached
> auth and you are not putting that attribute into cache so a basic
> authntication is okay is being returned with no session timeout."
> 
> Yes, I have indeed enabled session caching in my eap.conf file:
> cache {
>       enable = yes
>       lifetime = 24
>       max_entries = 1024
> }
> 
> Is that why the second session never terminates? How can I put the 
> "Session-Timeout" attribute into the session cache?

Do you know yet whether it actually *is* sending Session-Timeout
or not at reauth time? i.e. have you run FreeRADIUS in debug mode,
or used radsniff?

If it is sending it, then you need to look at the NAS and your
FreeRADIUS config is good already. If not, then you need to look
at the FreeRADIUS config.

But you probably don't need to cache it - it's the same every
time. Just make sure it's in the correct place in the config
(likely post-auth) so it's always returned.

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at leicester.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>