Re: Re-transmits arriving via a different proxy / EAP duplicate detection

2012-10-10 Thread Alan DeKok
Phil Mayers wrote: > First, the FreeRADIUS duplicate detect / retransmit logic doesn't apply > because the source IP, shared secret, Proxy-State and > Message-Authenticator are all different, even though all other > attributes are identical. This is correct behaviour AFAICT from the RFCs. > > Seco

Re: Re-transmits arriving via a different proxy / EAP duplicate detection

2012-10-10 Thread Phil Mayers
On 09/10/12 19:17, alan buxey wrote: Hi, As I iterate through our logging config, I'm gaining increasing visibility of all kinds of peculiar stuff. This one I spotted today - we are seeing remote RADIUS servers (eduroam visited sites) sending retransmits via different intermediate proxies. I'

Re: Re-transmits arriving via a different proxy / EAP duplicate detection

2012-10-09 Thread alan buxey
Hi, > As I iterate through our logging config, I'm gaining increasing > visibility of all kinds of peculiar stuff. This one I spotted today > - we are seeing remote RADIUS servers (eduroam visited sites) > sending retransmits via different intermediate proxies. I've seen this a couple of times in

Re-transmits arriving via a different proxy / EAP duplicate detection

2012-10-09 Thread Phil Mayers
All, Bit of an odd one here. Not sure where best to bring it up... if anyone has a more suitable discussion forum, please point me that way! As I iterate through our logging config, I'm gaining increasing visibility of all kinds of peculiar stuff. This one I spotted today - we are seeing rem