> I have FR set up to auth/acct against MySQL. It appears to work fine in > a high load environment, most of the time. > > Very, very occasionally FR appears to mis-process requests from the > NASes. > > The NAS will report that an Access-Request has been sent, and an > Access-Accept recieved, but nothing appears to get recorded (either in > detail or SQL accounting) by FreeRADIUS.
Not seeing it in detail or SQL doesn't neccessarily mean it didn't happen. That will just record the accounting packets and its possible your NAS isn't sending the accounting packets on one of these sessions. > > We are noticing this because attributes with incorrect values are > getting returned to the NAS. > > Even running FR in -X mode fails to catch the incoming/returned packets. > As far as FR is concerned, these sessions never happended. > That's wierd. Are you sure the NAS isn't configured with a secondary radius server that it may be sending these packets to? > I'm running out of ideas as to how to trace this problem. Any > suggestions are very welcome! I'm running FR 0.9.3. > You could try enabling detail auth_log and detail reply_log. That will capture all access request packets as well as all access accept packets that you send back. These are the actual authentication packets, rather than the normal detail file/sql that captures accounting. This would help you troubleshoot this. Hope that helps. -Dusty Doris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
