Im sorry, i missed out the debug long in my previous mail.<br><br>Please find the logs given below.<br><br>rad_recv: Access-Request packet from host <a href="http://127.0.0.1:30504">127.0.0.1:30504</a>, id=8, length=295<br>
User-Name = "anonymous"<br> Called-Station-Id = "00-A0-F8-BF-E9-BC:ssid1"<br> Calling-Station-Id = "00-0F-3D-E9-A6-54"<br> NAS-Port = 1<br> NAS-Port-Type =
Wireless-802.11<br> Framed-MTU = 1400<br> NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br> NAS-Identifier = "switch"<br> VSA-1 = "ssid1"<br> ASA-2 = "1"
<br> NAS-Port-Id = "WLAN1"<br> Connect-Info = "CONNECT 54Mbps 802.11a"<br> State = 0x7202552d433833273413b6683dd14790<br> EAP-Message = 0x0205004f158000000045170301004073b0056431239ce2d8e9dff10e30ac509c6189763cbcc5d2f0a254fc338a827b5c7322e66c46ebbddf16bb5a0d807a31b3bdd103188ded50ea2e25578a88d6de
<br> Message-Authenticator = 0xebdc63168f0f7b03694605ba31129085<br> Processing the authorize section of radiusd.conf<br>modcall: entering group authorize for request 4<br> modcall[authorize]: module "preprocess" returns ok for request 4
<br> modcall[authorize]: module "chap" returns noop for request 4<br> modcall[authorize]: module "mschap" returns noop for request 4<br> rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL
<br> rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "suffix_oblic" returns noop for request 4<br> rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL<br>
rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "prefix_oblic" returns noop for request 4<br> rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL<br> rlm_realm: No such realm "NULL"
<br> modcall[authorize]: module "suffix_at" returns noop for request 4<br> rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "prefix_at" returns noop for request 4
<br> rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "suffix_percent" returns noop for request 4<br>
rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "prefix_percent" returns noop for request 4<br> users: Matched entry anonymous at line 2
<br> modcall[authorize]: module "files" returns ok for request 4<br> rlm_eap: EAP packet type response id 5 length 79<br> rlm_eap: No EAP Start, astestuserng it's an on-going EAP conversation<br> modcall[authorize]: module "eap" returns updated for request 4
<br>modcall: leaving group authorize (returns updated) for request 4<br> rad_check_password: Found Auth-Type EAP<br> rad_check_password: Found Auth-Type EAP<br>Warning: Found 2 auth-types on request for user 'anonymous'
<br>auth: type "EAP"<br> Processing the authenticate section of radiusd.conf<br>modcall: entering group authenticate for request 4<br> rlm_eap: Request found, released from the list<br> rlm_eap: EAP/ttls<br> rlm_eap: processing type ttls
<br> rlm_eap_ttls: Authenticate<br> rlm_eap_tls: processing TLS<br>rlm_eap_tls: Length Included<br> eaptls_verify returned 11<br> eaptls_process returned 7<br> rlm_eap_ttls: Session established. Proceeding to decode tunneled attributes.
<br> Processing the authorize section of radiusd.conf<br>modcall: entering group authorize for request 4<br> modcall[authorize]: module "preprocess" returns ok for request 4<br> modcall[authorize]: module "chap" returns noop for request 4
<br> modcall[authorize]: module "mschap" returns noop for request 4<br> rlm_realm: No '/' in User-Name = "<a href="mailto:testuser@domain.com">testuser@domain.com</a>", looking up realm NULL<br> rlm_realm: No such realm "NULL"
<br> modcall[authorize]: module "suffix_oblic" returns noop for request 4<br> rlm_realm: No '/' in User-Name = "<a href="mailto:testuser@domain.com">testuser@domain.com</a>", looking up realm NULL<br>
rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "prefix_oblic" returns noop for request 4<br> rlm_realm: Looking up realm "<a href="http://domain.com">domain.com</a>" for User-Name = "
<a href="mailto:testuser@domain.com">testuser@domain.com</a>"<br> rlm_realm: Found realm "<a href="http://domain.com">domain.com</a>"<br> rlm_realm: Proxying request from user testuser to realm <a href="http://domain.com">
domain.com</a><br> rlm_realm: Adding Realm = "<a href="http://domain.com">domain.com</a>"<br> rlm_realm: Preparing to proxy authentication request to realm "<a href="http://domain.com">domain.com</a>"
<br> modcall[authorize]: module "suffix_at" returns updated for request 4<br> rlm_realm: Request already proxied. Ignoring.<br> modcall[authorize]: module "prefix_at" returns noop for request 4<br>
rlm_realm: Request already proxied. Ignoring.<br> modcall[authorize]: module "suffix_percent" returns noop for request 4<br> rlm_realm: Request already proxied. Ignoring.<br> modcall[authorize]: module "prefix_percent" returns noop for request 4
<br>radius_xlat: 'group2'<br>rlm_ldap: Entering ldap_groupcmp()<br>radius_xlat: 'o=domain,c=india'<br>radius_xlat: '(uid=<a href="mailto:testuser@domain.com">testuser@domain.com</a>)'<br>rlm_ldap: ldap_get_conn: Checking Id: 0
<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: attempting LDAP reconnection<br>rlm_ldap: (re)connect to <a href="http://1.1.1.3:389">1.1.1.3:389</a>, authentication 0<br>rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to
<a href="http://1.1.1.3:389">1.1.1.3:389</a><br>rlm_ldap: cn=Manager,o=domain,c=India bind to <a href="http://1.1.1.3:389">1.1.1.3:389</a> failed: Can't contact LDAP server<br>rlm_ldap: (re)connection attempt failed<br>rlm_ldap::ldap_groupcmp: search failed
<br>rlm_ldap: ldap_release_conn: Release Id: 0<br>radius_xlat: '1234'<br>rlm_ldap: Entering ldap_groupcmp()<br>radius_xlat: 'o=domain,c=india'<br>radius_xlat: '(uid=<a href="mailto:testuser@domain.com">testuser@domain.com
</a>)'<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: attempting LDAP reconnection<br>rlm_ldap: (re)connect to <a href="http://1.1.1.3:389">1.1.1.3:389</a>, authentication 0<br>
rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to <a href="http://1.1.1.3:389">1.1.1.3:389</a><br>rlm_ldap: cn=Manager,o=domain,c=India bind to <a href="http://1.1.1.3:389">1.1.1.3:389</a> failed: Can't contact LDAP server
<br>rlm_ldap: (re)connection attempt failed<br>rlm_ldap::ldap_groupcmp: search failed<br>rlm_ldap: ldap_release_conn: Release Id: 0<br>radius_xlat: '1111'<br>rlm_ldap: Entering ldap_groupcmp()<br>radius_xlat: 'o=domain,c=india'
<br>radius_xlat: '(uid=<a href="mailto:testuser@domain.com">testuser@domain.com</a>)'<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: attempting LDAP reconnection<br>rlm_ldap: (re)connect to
<a href="http://1.1.1.3:389">1.1.1.3:389</a>, authentication 0<br>rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to <a href="http://1.1.1.3:389">1.1.1.3:389</a><br>rlm_ldap: cn=Manager,o=domain,c=India bind to <a href="http://1.1.1.3:389">
1.1.1.3:389</a> failed: Can't contact LDAP server<br>rlm_ldap: (re)connection attempt failed<br>rlm_ldap::ldap_groupcmp: search failed<br>rlm_ldap: ldap_release_conn: Release Id: 0<br>radius_xlat: '111'<br>rlm_ldap: Entering ldap_groupcmp()
<br>radius_xlat: 'o=domain,c=india'<br>radius_xlat: '(uid=<a href="mailto:testuser@domain.com">testuser@domain.com</a>)'<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: attempting LDAP reconnection
<br>rlm_ldap: (re)connect to <a href="http://1.1.1.3:389">1.1.1.3:389</a>, authentication 0<br>rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to <a href="http://1.1.1.3:389">1.1.1.3:389</a><br>rlm_ldap: cn=Manager,o=domain,c=India bind to
<a href="http://1.1.1.3:389">1.1.1.3:389</a> failed: Can't contact LDAP server<br>rlm_ldap: (re)connection attempt failed<br>rlm_ldap::ldap_groupcmp: search failed<br>rlm_ldap: ldap_release_conn: Release Id: 0<br>radius_xlat: 'group1'
<br>rlm_ldap: Entering ldap_groupcmp()<br>radius_xlat: 'o=domain,c=india'<br>radius_xlat: '(uid=<a href="mailto:testuser@domain.com">testuser@domain.com</a>)'<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0
<br>rlm_ldap: attempting LDAP reconnection<br>rlm_ldap: (re)connect to <a href="http://1.1.1.3:389">1.1.1.3:389</a>, authentication 0<br>rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to <a href="http://1.1.1.3:389">
1.1.1.3:389</a><br>rlm_ldap: cn=Manager,o=domain,c=India bind to <a href="http://1.1.1.3:389">1.1.1.3:389</a> failed: Can't contact LDAP server<br>rlm_ldap: (re)connection attempt failed<br>rlm_ldap::ldap_groupcmp: search failed
<br>rlm_ldap: ldap_release_conn: Release Id: 0<br>radius_xlat: 'group2'<br>rlm_ldap: Entering ldap_groupcmp()<br>radius_xlat: 'o=domain,c=india'<br>radius_xlat: '(uid=<a href="mailto:testuser@domain.com">testuser@domain.com
</a>)'<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: attempting LDAP reconnection<br>rlm_ldap: (re)connect to <a href="http://1.1.1.3:389">1.1.1.3:389</a>, authentication 0<br>
rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to <a href="http://1.1.1.3:389">1.1.1.3:389</a><br>rlm_ldap: cn=Manager,o=domain,c=India bind to <a href="http://1.1.1.3:389">1.1.1.3:389</a> failed: Can't contact LDAP server
<br>rlm_ldap: (re)connection attempt failed<br>rlm_ldap::ldap_groupcmp: search failed<br>rlm_ldap: ldap_release_conn: Release Id: 0<br>radius_xlat: '1234'<br>rlm_ldap: Entering ldap_groupcmp()<br>radius_xlat: 'o=domain,c=india'
<br>radius_xlat: '(uid=<a href="mailto:testuser@domain.com">testuser@domain.com</a>)'<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: attempting LDAP reconnection<br>rlm_ldap: (re)connect to
<a href="http://1.1.1.3:389">1.1.1.3:389</a>, authentication 0<br>rlm_ldap: bind as cn=Manager,o=domain,c=India/secret to <a href="http://1.1.1.3:389">1.1.1.3:389</a><br>rlm_ldap: cn=Manager,o=domain,c=India bind to <a href="http://1.1.1.3:389">
1.1.1.3:389</a> failed: Can't contact LDAP server<br>rlm_ldap: (re)connection attempt failed<br>rlm_ldap::ldap_groupcmp: search failed<br>rlm_ldap: ldap_release_conn: Release Id: 0<br> users: Matched entry DEFAULT at line 40
<br> modcall[authorize]: module "files" returns ok for request 4<br> rlm_eap: No EAP-Message, not doing EAP<br> modcall[authorize]: module "eap" returns noop for request 4<br>modcall: leaving group authorize (returns updated) for request 4
<br> TTLS: Tunneled authentication will be proxied to <a href="http://domain.com">domain.com</a><br> Tunneled session will be proxied. Not doing EAP.<br> modcall[authenticate]: module "eap" returns handled for request 4
<br>modcall: leaving group authenticate (returns handled) for request 4<br>Sending Access-Request of id 0 to <a href="http://1.1.1.1">1.1.1.1</a> port 1812<br> User-Name = "<a href="mailto:testuser@domain.com">
testuser@domain.com</a>"<br> User-Password = "domain"<br> Called-Station-Id = "00-A0-F8-BF-E9-BC:ssid1"<br> Calling-Station-Id = "00-0F-3D-E9-A6-54"<br> NAS-Port = 1
<br> NAS-Port-Type = Wireless-802.11<br> Framed-MTU = 1400<br> NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br> NAS-Identifier = "switch"<br> VSA-1 = "ssid1"
<br> ASA-2 = "1"<br> NAS-Port-Id = "WLAN1"<br> Connect-Info = "CONNECT 54Mbps 802.11a"<br> Proxy-State = 0x38<br>Waking up in 6 seconds...<br>rad_recv: Access-Request packet from host
<a href="http://127.0.0.1:30504">127.0.0.1:30504</a>, id=8, length=295<br>Dropping conflicting packet from client wios:30504 - ID: 8 due to unfinished request 4<br>--- Walking the entire request list ---<br>Cleaning up request 0 ID 4 with timestamp 44ce1508
<br>Cleaning up request 1 ID 5 with timestamp 44ce1508<br>Cleaning up request 2 ID 6 with timestamp 44ce1508<br>Cleaning up request 3 ID 7 with timestamp 44ce1508<br>Re-sending Access-Request of id 0 to <a href="http://1.1.1.1">
1.1.1.1</a> port 1812<br> User-Name = "<a href="mailto:testuser@domain.com">testuser@domain.com</a>"<br> User-Password = "domain"<br> Called-Station-Id = "00-A0-F8-BF-E9-BC:ssid1"
<br> Calling-Station-Id = "00-0F-3D-E9-A6-54"<br> NAS-Port = 1<br> NAS-Port-Type = Wireless-802.11<br> Framed-MTU = 1400<br> NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1
</a><br> NAS-Identifier = "switch"<br> VSA-1 = "ssid1"<br> ASA-2 = "1"<br> NAS-Port-Id = "WLAN1"<br> Connect-Info = "CONNECT 54Mbps 802.11a"
<br> Client-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br> Realm = "<a href="http://domain.com">domain.com</a>"<br> Proxy-State = 0x38<br>Waking up in 5 seconds...<br>rad_recv: Access-Accept packet from host
<a href="http://1.1.1.1:1812">1.1.1.1:1812</a>, id=0, length=67<br> Reply-Message = " Hi <a href="mailto:testuser@domain.com">testuser@domain.com</a> welcome "<br> Proxy-State = 0x38<br> authorize: Skipping authorize in post-proxy stage
<br> rad_check_password: Found Auth-Type EAP<br> rad_check_password: Found Auth-Type EAP<br> rad_check_password: Found Auth-Type<br>Warning: Found 3 auth-types on request for user 'anonymous'<br> rad_check_password: Auth-Type = Accept, accepting the user
<br>radius_xlat: ' Hi <a href="mailto:testuser@domain.com">testuser@domain.com</a> welcome'<br>Login OK: [anonymous] (from client wios port 1 cli 00-0F-3D-E9-A6-54)<br>Sending Access-Accept of id 8 to <a href="http://127.0.0.1">
127.0.0.1</a> port 30504<br> Reply-Message = " Hi <a href="mailto:testuser@domain.com">testuser@domain.com</a> welcome"<br>Finished request 4<br>Going to the next request<br>Waking up in 5 seconds...<br>rad_recv: Access-Accept packet from host
<a href="http://1.1.1.1:1812">1.1.1.1:1812</a>, id=0, length=67<br>Reply from home server <a href="http://1.1.1.1:1812">1.1.1.1:1812</a> - ID: 0 arrived too late for request 4. Try increasing 'retry_delay' or 'max_request_time'
<br>Waking up in 5 seconds...<br>--- Walking the entire request list ---<br>Waking up in 5 seconds..<br><br><br>Thanks for any help.<br><br><div><span class="gmail_quote">On 7/22/06, <b class="gmail_sendername">Alan DeKok
</b> <<a href="mailto:aland@nitros9.org">aland@nitros9.org</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">"sumi thra" <
<a href="mailto:sumi.techno@gmail.com">sumi.techno@gmail.com</a>> wrote:<br>> > Please find the configuration in the users file & proxy.conf file. Please<br>> > let me know if i am missing or wrong configuration is done is achieve my
<br>> > objective.<br><br> Can you explain why you posted the configuration files when I told<br>you the debug output was important?<br><br> Alan DeKok.<br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">
http://www.freeradius.org/list/users.html</a><br></blockquote></div><br>