|
I am having an issue authenticating against mysql backended
radius now. I have been toyin with this for around 4 hours, and cannot seem to
make it work. In my previous email about rpm build, something about quirks was
mentioned on this arch… it has me weary… Here is the output from radiusd -X ++[logintime] returns noop rlm_pap: Found existing Auth-Type, not changing it. ++[pap] returns noop rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/peap rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 ++[eap] returns handled EAP-Message = 0x010200061920 Message-Authenticator =
0x00000000000000000000000000000000 State = 0x7a0f3a2b7b0d23f0e1d4dc591995af63 Finished request 13. Going to the next request Waking up in 9.9 seconds. User-Name = "digitalson" NAS-IP-Address = 192.168.246.5 NAS-Port = 0 Called-Station-Id =
"00-1D-7E-97-F6-7A:Northpoint Premium" Calling-Station-Id = "00-1D-E0-8C-07-61" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message =
0x0202007919800000006f160301006a01000066030147f95b9753cefb5adae0b4ba1f59d49dc0614fbb9ff218341ee80ef4354aaa7d000018002f00350005000ac009c00ac013c0140032003800130004010000250000000f000d00000a6469676974616c736f6e000a00080006001700180019000b00020100 State = 0x7a0f3a2b7b0d23f0e1d4dc591995af63 Message-Authenticator =
0x4a75ae062299e625fed959b6fa4bd464 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "digitalson",
looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: EAP packet type response id 2 length 121 rlm_eap: Continuing tunnel setup. ++[eap] returns ok rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS TLS Length 111 rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 006a],
ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a],
ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 085e],
Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004],
ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept: Need to read more data: SSLv3 read client
certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 rlm_eap_peap: EAPTLS_HANDLED ++[eap] returns handled EAP-Message =
0x0103040019c0000008bb160301004a02000046030147f9543a68321a7a62ce34c263763d3359f2099e1fd9ca05349a30804f08280420aea048386039e1a5cc9a13b4f0429a3914fb0ae478c40bb9fcfc9adeadc74431002f00160301085e0b00085a0008570003a6308203a23082028aa003020102020101300d06092a864886f70d0101040500308193310b3009060355040613024652310f300d060355040813065261646975733112301006035504071309536f6d65776865726531153013060355040a130c4578616d706c6520496e632e3120301e06092a864886f70d010901161161646d696e406578616d706c652e636f6d3126302406035504 EAP-Message =
0x03131d4578616d706c6520436572746966696361746520417574686f72697479301e170d3038303430363134333131365a170d3039303430363134333131365a307c310b3009060355040613024652310f300d0603550408130652616469757331153013060355040a130c4578616d706c6520496e632e312330210603550403131a4578616d706c65205365727665722043657274696669636174653120301e06092a864886f70d010901161161646d696e406578616d706c652e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100ca117750f8f17a2992b0480a1399839df3eec850117b33a6f511045c2093 EAP-Message =
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 EAP-Message =
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 EAP-Message = 0xc21109cfb9e3422ba776a96b Message-Authenticator =
0x00000000000000000000000000000000 State = 0x7a0f3a2b780c23f0e1d4dc591995af63 Finished request 14. Going to the next request Waking up in 9.9 seconds. User-Name = "digitalson" NAS-IP-Address = 192.168.246.5 NAS-Port = 0 Called-Station-Id =
"00-1D-7E-97-F6-7A:Northpoint Premium" Calling-Station-Id = "00-1D-E0-8C-07-61" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020300061900 State = 0x7a0f3a2b780c23f0e1d4dc591995af63 Message-Authenticator = 0x1ce44b64106d26fcd359de6619859946 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "digitalson",
looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: EAP packet type response id 3 length 6 rlm_eap: Continuing tunnel setup. ++[eap] returns ok rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 rlm_eap_peap: EAPTLS_HANDLED ++[eap] returns handled EAP-Message =
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 EAP-Message =
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 EAP-Message =
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 EAP-Message =
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 EAP-Message = 0xc4e35d2df42af41f Message-Authenticator =
0x00000000000000000000000000000000 State = 0x7a0f3a2b790b23f0e1d4dc591995af63 Finished request 15. Going to the next request Waking up in 9.9 seconds. User-Name = "digitalson" NAS-IP-Address = 192.168.246.5 NAS-Port = 0 Called-Station-Id =
"00-1D-7E-97-F6-7A:Northpoint Premium" Calling-Station-Id = "00-1D-E0-8C-07-61" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020400061900 State = 0x7a0f3a2b790b23f0e1d4dc591995af63 Message-Authenticator =
0xdcb63ac17c637f3a2986c92aff1f3af0 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "digitalson",
looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: EAP packet type response id 4 length 6 rlm_eap: Continuing tunnel setup. ++[eap] returns ok rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 rlm_eap_peap: EAPTLS_HANDLED ++[eap] returns handled EAP-Message =
0x010500d519001afd8b58bd12e3cb9fedaf77df710a1b666378f924516cb6351265906dd9dcf5cc8b6c9f6c4e98e7bdc03e464e0086f76c69294284fe27e0429cdc608ad229054497961089f1a6b59a255a4e289556f77922ebeae185caac925ae7b515ddd487009ab7d9bc8a424e3a39cf78ce3dcad4e9a04043bac9cf89387f2947b064e201189139fce33b0e1d146d691c4c9d60c3285e6e45a531e9c7e8cf9a012a0d1459d2d7113aa6c7f9392cb1bb738c086f6657446aa1f9014b1cdc490d0cdda99d70ad4d2135a1ad16030100040e000000 Message-Authenticator =
0x00000000000000000000000000000000 State = 0x7a0f3a2b7e0a23f0e1d4dc591995af63 Finished request 16. Going to the next request Waking up in 9.9 seconds. User-Name = "digitalson" NAS-IP-Address = 192.168.246.5 NAS-Port = 0 Called-Station-Id = "00-1D-7E-97-F6-7A:Northpoint
Premium" Calling-Station-Id = "00-1D-E0-8C-07-61" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020500061900 State = 0x7a0f3a2b7e0a23f0e1d4dc591995af63 Message-Authenticator =
0xc2f762f0550b5bc3d0385797a35f7bda +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "digitalson",
looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: EAP packet type response id 5 length 6 rlm_eap: Continuing tunnel setup. ++[eap] returns ok rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 rlm_eap_peap: EAPTLS_HANDLED ++[eap] returns handled EAP-Message = 0x010600061900 Message-Authenticator =
0x00000000000000000000000000000000 State = 0x7a0f3a2b7f0923f0e1d4dc591995af63 Finished request 17. Going to the next request Waking up in 9.9 seconds. Cleaning up request 12 ID 18 with timestamp +618 Cleaning up request 13 ID 19 with timestamp +618 Cleaning up request 14 ID 20 with timestamp +618 Cleaning up request 15 ID 21 with timestamp +618 Cleaning up request 16 ID 22 with timestamp +618 Cleaning up request 17 ID 23 with timestamp +618 Ready to process requests. Austin G.
Smith, A+, MCP Digital Son, I.T. Services 678.213.0550 x:101 Office 678.213.0535 Fax Need reliable hosting? |