(RADIATOR) Duplicate request detection?
Hugh Irvine
hugh at open.com.au
Thu Apr 27 02:56:15 CDT 2006
Hello Jan -
You are correct - it is impossible for Radiator to do duplicate
detection if the NAS equipment always sends different radius requests.
The duplicate detection code is in Radius/Client.pm if you are
interested (sub handle_request).
regards
Hugh
On 27 Apr 2006, at 17:10, Jan Tomasek wrote:
> Hello Hugh,
>
>> By default, DupInterval is set to 2 (seconds). If you want to disable
>> duplicate detection you should set DupInterval to 0.
>
> I know this.
>
>> See section 5.5.4 in the Radiator 3.14 reference manual ("doc/
>> ref.html").
>
> But there is also written "A value of 0 means duplicates are always
> accepted, which might not be very wise, except during testing."
>
> Now I'm running with 0 but I wish to modify my testing software to
> produce packets which will not triger duplicate detection at all.
>
> I tried to set DupInterval to 20 for our AP and even in this
> condition I
> was unable to triger dup. detection. To me it looks like Cisco is
> continuously increasing Identifier Radius packets.
>
> That is bit hard to implement if I wish to have testing script
> stateless, but if necesary I will add some state file which will keep
> Identifier values.
>
> Can you confirm that this modification will stop trigering dup.
> detection?
>
> --
> -----------------------
> Jan Tomasek aka Semik
> http://www.tomasek.cz/
>
NB:
Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list