Hello all, Tim was a the PF eduroam test user to see if the TRLS were up.
Thanks, Ludovic Zammit Product Support Engineer Principal Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> <http://www.linkedin.com/company/akamai-technologies> <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > On Oct 13, 2021, at 9:18 AM, Mickael BOUBALA via PacketFence-users > <packetfence-users@lists.sourceforge.net> wrote: > > Hi Tomasz, > > Great thanks for help. I disabled monitor servers. > The easier way : > To do so, from 'Configuration→Policies and Access Control→Authentication > Sources', click on 'Your Source'. > And the disable Monitor option (Do you want to monitor this source) > > Another way: > I finded the guilty script written in Go language. The file is located at > /go/cmd/pfacct/radius_test.go > > Tim Cooper is the author of this (tim.coo...@layeh.com > <mailto:tim.coo...@layeh.com>): https://github.com/inverse-inc/go-radius > <https://urldefense.com/v3/__https://github.com/inverse-inc/go-radius__;!!GjvTz_vk!BubzcEoa_eSPyhJmgoiIjwlYsW2-DeU4ZUafSBlzsQHNcod4riXHrYk2NIKu48Xg$> > > Now how to use this testing script ? > Is there any use case of this script ? > > Thank you! > > Regards. > Mickael BOUBALA > > Le mer. 13 oct. 2021 à 07:56, Tomasz Karczewski OLMAN > <tkarczew...@man.olsztyn.pl <mailto:tkarczew...@man.olsztyn.pl>> a écrit : > Disable monitor servers > > > > Tomasz Karczewski > > Administrator Sieci > > <signature_image001_0.jpg> > > tkarczew...@man.olsztyn.pl <mailto:tkarczew...@man.olsztyn.pl> > http://www.man.olsztyn.pl > <https://urldefense.com/v3/__http://www.man.olsztyn.pl__;!!GjvTz_vk!BubzcEoa_eSPyhJmgoiIjwlYsW2-DeU4ZUafSBlzsQHNcod4riXHrYk2NB6Zo5_U$> > http://www.uwm.edu.pl > <https://urldefense.com/v3/__http://www.uwm.edu.pl__;!!GjvTz_vk!BubzcEoa_eSPyhJmgoiIjwlYsW2-DeU4ZUafSBlzsQHNcod4riXHrYk2NIQlwsDK$> > tel. (89) 523 45 55 <tel:(89)%20523%2045%2055> fax. (89) 523 43 47 > > > Ośrodek Eksploatacji i Zarządzania > > Miejską Siecią Komputerową OLMAN w Olsztynie > > Uniwersytet Warmińsko-Mazurski w Olsztynie > > > > -------- Oryginalna wiadomość -------- > Od: Mickael BOUBALA via PacketFence-users > <packetfence-users@lists.sourceforge.net > <mailto:packetfence-users@lists.sourceforge.net>> > Data: 13.10.2021 07:13 (GMT+01:00) > Do: PacketFence-users <packetfence-users@lists.sourceforge.net > <mailto:packetfence-users@lists.sourceforge.net>> > DW: Mickael BOUBALA <mickaelboub...@gmail.com > <mailto:mickaelboub...@gmail.com>> > Temat: [*Suspicious Email*] [PacketFence-users] User "tim" is sending > thousands of radius authentication request > > Hi, > > I'm running packetfence 10.2. > > Eduroam partners are warning me on the following issue: Thousands of radius > authentication requests are being sent in a loop by a user named "tim". > This user named "tim" has no secret. > > The thing is that i didn't have any user named "tim". > > It seems that there is a script which tests remote radius servers in loop. > > Question: > Can you help to find this testing script ? > What is the aim of this script ? > > So basically we just want to find the script where the user "tim" is > setted. > > I would really appreciate any help. > > Regards > Mickael BOUBALA > <radius_test.go>_______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > <mailto:PacketFence-users@lists.sourceforge.net> > https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!BubzcEoa_eSPyhJmgoiIjwlYsW2-DeU4ZUafSBlzsQHNcod4riXHrYk2NEwy903A$ > > <https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!BubzcEoa_eSPyhJmgoiIjwlYsW2-DeU4ZUafSBlzsQHNcod4riXHrYk2NEwy903A$>
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
