Re: Dropping conflicting authentication packet

2001-08-23 Thread aland
Spike Ilacqua [EMAIL PROTECTED] wrote: If it works in debug, has issues in regular, check the permissions needed to read the auth files. I'm seeing basically the same thing, but I don't believe it's a permision problem. The server does work in regular mode, it's only after about 20

RE: Dropping conflicting authentication packet

2001-08-23 Thread Chris Parker
At 10:19 AM 8/23/2001 -0700, you wrote: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Qinxue Chen [EMAIL PROTECTED] wrote: The problem seems to be that the new request has the same request ID, request code, source IP, source port, but different vectors (what's this?)

RE: Dropping conflicting authentication packet

2001-08-23 Thread Qinxue Chen
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Qinxue Chen [EMAIL PROTECTED] wrote: The problem seems to be that the new request has the same request ID, request code, source IP, source port, but different vectors (what's this?) It means that the request is a new one, and

RE: Dropping conflicting authentication packet

2001-08-23 Thread Qinxue Chen
No. Read the RFC. Understand how Authentication-Vector is used. Your case1 is correct, your case2 is handled. The reason there is a problem is old requests are for some reason not being cleared. That's all there is, don't try and make it more complex, it's a bug in the code, not

Re: Dropping conflicting authentication packet

2001-08-23 Thread Miquel van Smoorenburg
In article [EMAIL PROTECTED], [EMAIL PROTECTED] wrote: Qinxue Chen [EMAIL PROTECTED] wrote: The problem seems to be that the new request has the same request ID, request code, source IP, source port, but different vectors (what's this?) It means that the request is a new one, and

Re: Dropping conflicting authentication packet

2001-08-23 Thread aland
[EMAIL PROTECTED] (Miquel van Smoorenburg) wrote: It means that the request is a new one, and different from the first on. The RFC's specifically allow for this. They do? Where does it say that?. And at least for accounting packets the vector is _supposed_ to change since the

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 15, 2001 6:57 AM To: [EMAIL PROTECTED] Subject: Re: Dropping conflicting authentication packet Spike Ilacqua [EMAIL PROTECTED] wrote: I'm trying to use freeradius 0.2 (on BSDI 4.0.1, no threads, no sharded) with a 3COM

RE: Dropping conflicting authentication packet

2001-08-22 Thread Chris Parker
At 12:40 PM 8/22/2001 -0700, Qinxue Chen wrote: I used two kinds of RADIUS servers. With Merit 3.6B, the server accept a lot more traffic from the NAS servers. There is no single complain. With freeradius (snapshot 08/20/01), we got a lot Dropping conflicting authentication packets messages but

Re: Dropping conflicting authentication packet

2001-08-22 Thread aland
Qinxue Chen [EMAIL PROTECTED] wrote: I used two kinds of RADIUS servers. With Merit 3.6B, the server accept a lot more traffic from the NAS servers. There is no single complain. With freeradius (snapshot 08/20/01), we got a lot Dropping conflicting authentication packets messages but for only

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
-Original Message- From: Chris Parker [mailto:[EMAIL PROTECTED]] At 12:40 PM 8/22/2001 -0700, Qinxue Chen wrote: I used two kinds of RADIUS servers. With Merit 3.6B, the server accept a lot more traffic from the NAS servers. There is no single complain. With freeradius

Re: Dropping conflicting authentication packet

2001-08-22 Thread aland
Qinxue Chen [EMAIL PROTECTED] wrote: What did the debug show? With debug on, I couldn't see errors at all. And how long did the server take to reply? o Was the server replying to the request? Definitely the newest request is dropped. That is NOT an answer to the question.

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Qinxue Chen [EMAIL PROTECTED] wrote: What did the debug show? With debug on, I couldn't see errors at all. And how long did the server take to reply? within miniseconds normally. Could the server cached the IDs somehow?

RE: Dropping conflicting authentication packet

2001-08-22 Thread Chris Parker
At 01:58 PM 8/22/2001 -0700, Qinxue Chen wrote: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Qinxue Chen [EMAIL PROTECTED] wrote: What did the debug show? With debug on, I couldn't see errors at all. And how long did the server take to reply? within

Re: Dropping conflicting authentication packet

2001-08-22 Thread Spike Ilacqua
If it works in debug, has issues in regular, check the permissions needed to read the auth files. I'm seeing basically the same thing, but I don't believe it's a permision problem. The server does work in regular mode, it's only after about 20 minutes it starts reporting Dropping conflicting

Re: Dropping conflicting authentication packet

2001-08-22 Thread Chris Parker
At 03:49 PM 8/22/2001 -0600, you wrote: If it works in debug, has issues in regular, check the permissions needed to read the auth files. I'm seeing basically the same thing, but I don't believe it's a permision problem. The server does work in regular mode, it's only after about 20 minutes

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
From: Chris Parker [mailto:[EMAIL PROTECTED]] At 03:49 PM 8/22/2001 -0600, you wrote: If it works in debug, has issues in regular, check the permissions needed to read the auth files. I'm seeing basically the same thing, but I don't believe it's a permision problem. The server

Re: Dropping conflicting authentication packet

2001-08-22 Thread Spike Ilacqua
Is this version 0.1, 0.2, or latest CVS? 0.2 on BSDI 4.0.1, compiled static without threads. I'll try CVS now. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
The problem seems to be that the new request has the same request ID, request code, source IP, source port, but different vectors (what's this?) as one of the old requests. From the problem I saw, it is not caused by the NAS end. The freeradius didn't clear some old requests properly in the

RE: Dropping conflicting authentication packet

2001-08-22 Thread Chris Parker
At 05:40 PM 8/22/2001 -0700, you wrote: The problem seems to be that the new request has the same request ID, request code, source IP, source port, but different vectors (what's this?) as one of the old requests. From the problem I saw, it is not caused by the NAS end. The freeradius didn't

Re: Dropping conflicting authentication packet

2001-08-15 Thread aland
Spike Ilacqua [EMAIL PROTECTED] wrote: I'm trying to use freeradius 0.2 (on BSDI 4.0.1, no threads, no sharded) with a 3COM Total Control Hyper Arc (running V4.1.59). It works for about 20 minutes but then stops authenticating and begins logging Dropping conflicting authentication packet for