Re: Indeterministic EAP error

2012-10-05 Thread Alan DeKok
Matthias Nagel wrote: Anyway, first things - check your eap {} module config, specifically ensure that max_sessions is high enough to support your load, that timer_expire isn't too low, and if applicable, that your TLS session caching is ok (size, particularly). I did not find

Indeterministic EAP error

2012-10-04 Thread Matthias Nagel
Hello, sometimes I get the error WARNING: !! EAP session for state 0xABCDEFGHIJKLMNOP did not finish! in my log files / debug output. Before anybody says have a look at http://deployingradius.com/documents/configuration/eap-problems.html that will help, please read on, because I already have

Re: Indeterministic EAP error

2012-10-04 Thread Phil Mayers
On 04/10/12 16:45, Matthias Nagel wrote: I cannot find any pattern, so I do not believe it to be a client side issue. Of course, one can argue to ignore the warning as it works most of the time, but I do not like indeterministically behaving IT systems, hence it preys on my mind. Has anybody

Re: Indeterministic EAP error

2012-10-04 Thread Alan DeKok
Matthias Nagel wrote: I cannot find any pattern, so I do not believe it to be a client side issue. It's always an issue with the client, WiFi, or AP. It's not an issue with FreeRADIUS. Why? All of the EAP is driven by the client. Of course, one can argue to ignore the warning as it

Re: Indeterministic EAP error

2012-10-04 Thread Matthias Nagel
Hello, Am Donnerstag 04 Oktober 2012, 17:09:35 schrieb Phil Mayers: On 04/10/12 16:45, Matthias Nagel wrote: I cannot find any pattern, so I do not believe it to be a client side issue. Has anybody an idea what the reason might be? If anybody wants to see a full debug output or a

Re: Indeterministic EAP error

2012-10-04 Thread Phil Mayers
On 04/10/12 18:10, Matthias Nagel wrote: That would be nice, indeed. But if the reason is signal strengh of a WiFi, then the numbers heavily depend on your WiFi coverage. So it is difficult to compare. Sure. As Alan says, it's the client that's going away. Maybe search the logs of your

Re: Indeterministic EAP error

2012-10-04 Thread alan buxey
Hi, I cannot find any pattern, so I do not believe it to be a client side issue. snip One thing: that logging only happens in debug mode. Most people don't run in debug mode all the time, so as far as I know, it could be normal - maybe everyone sees failure rates of that order? snip as

Re: Indeterministic EAP error

2012-10-04 Thread alan buxey
Hi, I found the entry # fragment_size = 1024 to be commented out. Does anybody has experiences with HP E-MSM 430 APs? Probably, this is a dummy question: I always believed that the smallest MTU that must be supported by an ethernet devices is 1500. Are there really APs that support

Re: Indeterministic EAP error

2012-10-04 Thread Matthew Newton
On Thu, Oct 04, 2012 at 05:45:30PM +0200, Matthias Nagel wrote: WARNING: !! EAP session for state 0xABCDEFGHIJKLMNOP did not finish! ... Has anybody an idea what the reason might be? We see it a lot less since we tweaked the EAP timers on our Cisco Wireless Controller. You don't say what APs or