> > Whether this has any bearing on it I'm not sure, but this seems to
be
> > affecting users that use wpa_supplicant more, though Windows users
> have
> > also reported the problem.
> 
>   The sessions *also* have a timeout.  Read eap.conf.
> 

Do you mean under the cache directive?
If so that is set to 48 hours, yet failure occurred within 30 minutes.
Our wireless controllers have a 1800 second client session timeout,
forcing a reauth every 30 mins.

Below is an excerpt of the radpostauth table for an affected user, it
shows the user re-authing every 30 mins though the night. 
I migrated back to 2.1.8 (from 2.1.7) at 08:41 this morning.  The client
reauthed successfully once after the reload at 08:48, but then fails at
the first 30min session timeout after that.

3843824         [email protected]            Access-Accept
2010-01-13 02:17:26      
3845505         [email protected]            Access-Accept
2010-01-13 02:47:26      
3846902         [email protected]            Access-Accept
2010-01-13 03:17:26      
3848181         [email protected]            Access-Accept
2010-01-13 03:47:26      
3849298         [email protected]            Access-Accept
2010-01-13 04:17:26      
3850365         [email protected]            Access-Accept
2010-01-13 04:47:26      
3851351         [email protected]            Access-Accept
2010-01-13 05:17:51      
3852249         [email protected]            Access-Accept
2010-01-13 05:47:51      
3853197         [email protected]            Access-Accept
2010-01-13 06:17:51      
3854151         [email protected]            Access-Accept
2010-01-13 06:47:51      
3855154         [email protected]            Access-Accept
2010-01-13 07:17:51      
3856266         [email protected]            Access-Accept
2010-01-13 07:47:51      
3857449         [email protected]            Access-Accept
2010-01-13 08:18:16      
3858680         [email protected]            Access-Accept
2010-01-13 08:48:16      
3860025         [email protected]            Access-Reject
2010-01-13 09:18:16      
3860091         [email protected]            Access-Reject
2010-01-13 09:19:37      
3860144         [email protected]            Access-Reject
2010-01-13 09:20:58      
3860165         [email protected]            Access-Reject
2010-01-13 09:21:23     

Thanks,
Jezz.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to