access reject problem

Greg Antic greg.antic at stc.za.com
Fri Jan 13 08:18:16 CET 2017


Hi List,



I am seeing strange behaviour when using auth-type reject for a user. We are running version 3.0.12.



# radiusd -X

FreeRADIUS Version 3.0.12



The user account has been disabled and the auth-type set as per radcheck output below. The logs show rejected for many hours and all of a sudden it will start a session however the postauth table shows it was rejected. It's almost like freeradius gets tired of saying no and eventually gives in and says yes.



Below the radpostauth shows the continual rejects which it has been rejected all day then all of a sudden at 00:02:46 the session starts.



Does anyone have an explanation or idea as to why this would occur?



Radcheck:

username | Simultaneous-Use        | := | 1

username | Cleartext-Password     | := | password

username | Auth-Type                     | := | Reject

username | Calling-Station-Id         | := | number



radpostauth:

username | Access-Reject | 2017-01-13 00:02:16

username | Access-Reject | 2017-01-13 00:02:00

username | Access-Reject | 2017-01-13 00:01:34

username | Access-Reject | 2017-01-13 00:01:09

username | Access-Reject | 2017-01-13 00:00:43

username | Access-Reject | 2017-01-13 00:00:18



radacct:

username | acctstarttime

username | 2017-01-13 00:02:46



Thanks,



Greg


More information about the Freeradius-Users mailing list