I used two kinds of RADIUS servers. With Merit 3.6B, the server accept a lot
more traffic from the NAS servers. There is no single complain. With
freeradius (snapshot 08/20/01), we got a lot "Dropping conflicting
authentication packets" messages but for only very limited test traffic. I
set "hostname_lookup" no. You mean the NAS servers keep using the same
sequence numbers or IDs for authentication packets, even though the requests
may come from different users? Then the way to get around it is not to check
the ID?
Thanks for your help.
--Qinxue Chen
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 15, 2001 6:57 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Dropping conflicting authentication packet
>
>
> Spike Ilacqua <[EMAIL PROTECTED]> wrote:
> > I'm trying to use freeradius 0.2 (on BSDI 4.0.1, no threads, no
> > sharded) with a 3COM Total Control Hyper Arc (running V4.1.59). It
> > works for about 20 minutes but then stops authenticating and begins
> > logging "Dropping conflicting authentication packet" for every
> > request.
>
> That happens because the server is taking a long time to process a
> request, and the NAS gives up, and sends another request using the
> same ID.
>
> The problem is either that the NAS is giving up too early, or the
> server is taking too long to process a request.
>
> As always, the solution is to run the server in debugging mode.
> Send it one request at a time, using 'radtest'. See how long the
> requests take. Let the NAS send it requests, and see how long they
> take to process.
>
>
> Off of the top of my head, I'd say you have 'hostname_lookups' set
> to 'yes' in the configuration file, and your DNS isn't set up
> properly.
>
> Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
__________________________________________
NetZero Platinum
Sign Up Today - Only $9.95 per month!
http://www.netzero.net
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
