problems with authentication on freeradius using mikrotik

[Mehrzad Moghaddas]

plz send the mikrotik log , routeros version .

On Wed, Oct 9, 2019 at 8:15 PM Orestes Leal Rodríguez <olealrd1981 at gmail.com>
wrote:

> Juliana,
>
> On 10/9/19, juliana sales porto <julianaporto3 at hotmail.com> wrote:
> > So let me think if I understood correctly
> > all these msgs:
> > Wed Oct  9 12:25:30 2019 : Info: rlm_radutmp: Login entry for NAS
> 10.71.2.30
> > port 2162201848 duplicate
> > Wed Oct  9 12:25:30 2019 : Error: rlm_radutmp: Logout for NAS 10.50.4.30
> > port 2162197987, but no Login record
> > Wed Oct  9 12:25:32 2019 : Error: Discarding duplicate request from
> client
> > all port 59797 - ID: 175 due to unfinished request 188853
> > Wed Oct  9 12:25:33 2019 : Error: Discarding conflicting packet from
> client
> > all port 59797 - ID: 175 due to recent request 188853.
> > Wed Oct  9 12:25:33 2019 : Error: Discarding conflicting packet from
> client
> > all port 48639 - ID: 157 due to recent request 188856.
> > Wed Oct  9 12:25:34 2019 : Info: rlm_radutmp: Login entry for NAS
> 10.71.2.30
> > port 2162201849 duplicate
> > Wed Oct  9 12:25:35 2019 : Error: Discarding duplicate request from
> client
> > all port 60778 - ID: 65 due to unfinished request 188863
> > Wed Oct  9 12:25:35 2019 : Error: Discarding conflicting packet from
> client
> > all port 60778 - ID: 65 due to recent request 188863.
> >
> > It's better now?
> >
> > So all these issues is because my database is slow?
> > But I have another question, why this issues doesn't happen with pfsense
> or
> > aruba authetication? Only mikrotik?
>
> Can you do a packet capture and configirm that the NAS is sending
> duplicates?
>
> From RFC 2865:
>
> The RADIUS server can detect a duplicate request if  it has the same
> client source IP address and source UDP port and Identifier within a
> short span of time
>
> And Also from https://tools.ietf.org/html/rfc5080#section-2.2.2
>
> The NAS is the problem.
>
> Orestes
>
>
>
> >
> >
> > Att,
> >
> > Juliana Porto
> >
> > ________________________________
> > De: Freeradius-Users
> > <freeradius-users-bounces+julianaporto3=hotmail.com at lists.freeradius.org>
> em
> > nome de Alan DeKok <aland at deployingradius.com>
> > Enviado: quarta-feira, 9 de outubro de 2019 09:56
> > Para: FreeRadius users mailing list <
> freeradius-users at lists.freeradius.org>
> > Assunto: Re: problems with authentication on freeradius using mikrotik
> >
> > On Oct 9, 2019, at 8:53 AM, juliana sales porto <
> julianaporto3 at hotmail.com>
> > wrote:
> >>
> >> Alan the FreeRADIUS these logs of error. A little help, please? 😄
> >
> >   It's not a good idea to post images to the mailing list.  Is it really
> > that difficult to cut & paste text from a terminal window?
> >
> >   The error messages are always due to the same issue.  A back-end
> database
> > is slow and is blocking the server.
> >
> >   Alan DeKok.
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html