Re: [Help-gnu-radius] radius and postgress

[Sergey Poznyakoff]

> Why radius executes acct_start_query for same session twice?

Because it has received the duplicate accounting packet and did not
recognize it as such. Possible reasons are:

1) The duplicate arrived when the first request have expired in the
queue. You can easily check if it is so by examining the contents of
your detail file and comparing the settings on the NAS with those of
raddb/config.

Solution: increase request-cleanup-delay in acct section of
config.

2) When retransmitting the accounting request, the NAS changed its
ID and/or authenticator (Cisco series reportedly does so). To check if
it is so you will have to set the debugging level to "radius.c"=1 and
analize the radius.debug messages. For solution, see

http://www.gnu.org/software/radius/manual/html_chapter/radius_6.html#SEC16

and

http://www.gnu.org/software/radius/manual/html_chapter/radius_9.html#SEC74

On the other hand, the NAS had to resend the packet because it had not
received the radius reply. Possible reasons are:

1) misconfiguration of the NAS (see p. 1 above)

2) The reply arrived during the high NAS load so it dropped it

3) Network outage

The 1) seems to be the most probable one.

Regards,
Sergey