On 2013-10-18 13:07, Heikki Vatiainen wrote: > On 10/18/2013 12:14 PM, Alexander Hartmaier wrote: > >> The requests are sent to two Radiator servers forming a faiover pair >> which both have the same TACACS key. >> It only happens from time to time, the authentication and accouting >> requests usually work. > Have you tried with SingleSession option? This sets the > TAC_PLUS_SINGLE_CONNECT_FLAG flag as described in > http://tools.ietf.org/html/draft-grant-tacacs-02
That's a good pointer, thanks! According to the Radiator ref.pdf it defaults to 1 (enabled) (we're running 4.11 + patches), should I try to disable it? Can this be done for some clients only too? > > Thanks, > Heikki > *"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"* T-Systems Austria GesmbH Rennweg 97-99, 1030 Wien Handelsgericht Wien, FN 79340b *"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"* Notice: This e-mail contains information that is confidential and may be privileged. If you are not the intended recipient, please notify the sender and then delete this e-mail immediately. *"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"* _______________________________________________ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator