Cache errors(?) - single device

Marcin Marszałkowski m.marszal at wp.pl
Wed Sep 11 11:28:03 CEST 2019


> Alan DeKok <aland at deployingradius.com> w dniu 09.09.2019, o godz. 15:43:
>  It *does* show you what the server is doing, and *why* it added attributes to Access-Accept.


So, I've run a couple of tests (roaming between clients) with cache disabled and enabled.

Cache disabled debug:

(11) eap: Expiring EAP session with state 0x8afdaa7a8369b374
(11) eap: Finished EAP session with state 0x8afdaa7a8369b374
(11) eap: Previous EAP request found for state 0x8afdaa7a8369b374, released from the list
(11) eap: Peer sent packet with method EAP PEAP (25)
(11) eap: Calling submodule eap_peap to process data
(11) eap_peap: Continuing EAP-TLS
(11) eap_peap: [eaptls verify] = ok
(11) eap_peap: Done initial handshake
(11) eap_peap: [eaptls process] = ok
(11) eap_peap: Session established.  Decoding tunneled attributes
(11) eap_peap: PEAP state send tlv success
(11) eap_peap: Received EAP-TLV response
(11) eap_peap: Success
(11) eap_peap: Using saved attributes from the original Access-Accept
(11) eap_peap:   Session-Timeout = 86400
(11) eap_peap:   Termination-Action = RADIUS-Request
(11) eap_peap:   Fall-Through = Yes
(11) eap_peap:   Acct-Interim-Interval = 300
(11) eap_peap:   Tunnel-Type = VLAN
(11) eap_peap:   Tunnel-Medium-Type = IEEE-802
(11) eap_peap:   Tunnel-Private-Group-Id = "14"
(11) eap_peap:   User-Name = "Martin"
(11) eap: Sending EAP Success (code 3) ID 148 length 4
(11) eap: Freeing handler
(11)     [eap] = ok
(11)   } # authenticate = ok

Cache enabled debug:

(18) eap: Expiring EAP session with state 0x9049ed0d92dcf470
(18) eap: Finished EAP session with state 0x9049ed0d92dcf470
(18) eap: Previous EAP request found for state 0x9049ed0d92dcf470, released from the list
(18) eap: Peer sent packet with method EAP PEAP (25)
(18) eap: Calling submodule eap_peap to process data
(18) eap_peap: Continuing EAP-TLS
(18) eap_peap: [eaptls verify] = ok
(18) eap_peap: Done initial handshake
(18) eap_peap: [eaptls process] = ok
(18) eap_peap: Session established.  Decoding tunneled attributes
(18) eap_peap: PEAP state send tlv success
(18) eap_peap: Received EAP-TLV response
(18) eap_peap: Success
(18) eap_peap: No saved attributes in the original Access-Accept
(18) eap_peap:   &request:EAP-Session-Resumed := 1
(18) eap: Sending EAP Success (code 3) ID 149 length 4
(18) eap: Freeing handler
(18)     [eap] = ok
(18)   } # authenticate = ok


Without cache, all AVP are retrieved from sql; with cache that step is skipped and cache doesn’t save AVP.
If it’s required, I can post full debug or attached it as file ;-)
Any ideas what might be going wrong with saving AVP in cache?





More information about the Freeradius-Users mailing list