NSAPI changes Acct-Session-Id from upstream provider
    Matthew Newton 
    mcn at freeradius.org
       
    Mon Feb 24 09:56:56 UTC 2025
    
    
  
On 24/02/2025 07:05, Gabriel Marais wrote:
>> Authentication Request Received
> < Access Accept sent back
>> Accounting Start Packet Received with a Acct-Session-Id
> < Acknowledgement sent back
>> Interim Accounting Packet Received - This time with a different Acct-Session-Id for the same connection
That's just broken. RFC 2866 s5.5 and 2869 s2.1 make it clear that 
Acct-Session-Id must match across the whole session. Those documents 
have only been published for nearly 25 years :(
Common sense says the same, too.
> ** At this point, things start going bad as we are not able to update
> the original DB entry created with the Acct Start Packet, since the
> Acct-Session-Id differs between the packet received in the Accounting
> Start Packet and the Interim Accounting Packet.
Yeah, quite. The behaviour needs fixing or the kit needs throwing in the 
bin and replacing with something sane.
-- 
Matthew
    
    
More information about the Freeradius-Users
mailing list