[EXTERNAL] Understanding FreeRADIUS statistics

[dominic.stalder at unibe.ch]

Please forget about this question, stupidity on my side: "enable = no". Sorry to all on the list!

Am 27.06.24, 10:22 schrieb "Stalder, Dominic (ID)" <dominic.stalder at unibe.ch <mailto:dominic.stalder at unibe.ch>>:


Hi Alan and Alister


Two days ago I removed the symlink /etc/freeradius/mods-enabled/cache_eap, but today I found the following cache config lines in /etc/freeradius/mods-available/eap:


tls-config tls-common {
private_key_file = ${certdir}/server.key
certificate_file = ${certdir}/server.crt


...


cache {
enable = no
lifetime = 12 # hours
max_entries = 0
name = "EAP module"
persist_dir = "${logdir}/tlscache"
}
}


Should I remove those lines as well or what is the recommended configuration for the tls-config part?


Thanks and regards
Dominic


Am 25.06.24, 16:59 schrieb "Stalder, Dominic (ID)" <dominic.stalder at unibe.ch <mailto:dominic.stalder at unibe.ch> <mailto:dominic.stalder at unibe.ch <mailto:dominic.stalder at unibe.ch>>>:




Thanks.




> Just disable it. I don't think it really helps.
Done = disabled.








Am 25.06.24, 15:53 schrieb "Freeradius-Users im Auftrag von Alan DeKok" <freeradius-users-bounces+dominic.stalder=unibe.ch at lists.freeradius.org <mailto:unibe.ch at lists.freeradius.org> <mailto:unibe.ch at lists.freeradius.org <mailto:unibe.ch at lists.freeradius.org>> <mailto:unibe.ch at lists.freeradius.org <mailto:unibe.ch at lists.freeradius.org> <mailto:unibe.ch at lists.freeradius.org <mailto:unibe.ch at lists.freeradius.org>>> im Auftrag von aland at deployingradius.com <mailto:aland at deployingradius.com> <mailto:aland at deployingradius.com <mailto:aland at deployingradius.com>> <mailto:aland at deployingradius.com <mailto:aland at deployingradius.com> <mailto:aland at deployingradius.com <mailto:aland at deployingradius.com>>>>:








On Jun 25, 2024
>
> If I understand you correctly, we should disable the EAP caching completely? As I said, I did not know about it before and I am absolutely willing to keep the configuration as simple as possible, if you recommend that!








Just disable it. I don't think it really helps.








> If you recommend to disable it, is the following correct:
>
> 1. Delete the symlink /etc/freeradius/mods-enabled/cache_eap
>
> 2. Restart the FreeRADIUS service








Yes.








Alan DeKk.








-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html> <http://www.freeradius.org/list/users.html> <http://www.freeradius.org/list/users.html;> <http://www.freeradius.org/list/users.html> <http://www.freeradius.org/list/users.html;> <http://www.freeradius.org/list/users.html;> <http://www.freeradius.org/list/users.html;>