rad_recv: Access-Request packet from host 172.18.0.28:32796, id=1, length=131
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0x22ebf9ae55871a1c1de1a3bdf2111086
        EAP-Message = 0x02640018017370636f6173743140616c636174656c2e726f
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
  modcall[authorize]: module "chap" returns noop for request 0
  modcall[authorize]: module "mschap" returns noop for request 0
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 0
  rlm_eap: EAP packet type response id 100 length 24
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 0
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 0
modcall: group authorize returns updated for request 0
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 0
  rlm_eap: EAP Identity
  rlm_eap: processing type tls
  rlm_eap_tls: Initiate
  rlm_eap_tls: Start returned 1
  modcall[authenticate]: module "eap" returns handled for request 0
modcall: group authenticate returns handled for request 0
Sending Access-Challenge of id 1 to 172.18.0.28:32796
        EAP-Message = 0x016500061520
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xb2c1d890416c3898f4d6b8697368cd5c
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 172.18.0.28:32796, id=2, length=131
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0x9f0dc2f291146b1ceb7db575dcc10fb8
        EAP-Message = 0x02650006030d
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        State = 0xb2c1d890416c3898f4d6b8697368cd5c
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
  modcall[authorize]: module "preprocess" returns ok for request 1
  modcall[authorize]: module "chap" returns noop for request 1
  modcall[authorize]: module "mschap" returns noop for request 1
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 1
  rlm_eap: EAP packet type response id 101 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 1
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 1
modcall: group authorize returns updated for request 1
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 1
  rlm_eap: Request found, released from the list
  rlm_eap: EAP NAK
 rlm_eap: EAP-NAK asked for EAP-Type/tls
  rlm_eap: processing type tls
 rlm_eap_tls: Requiring client certificate
  rlm_eap_tls: Initiate
  rlm_eap_tls: Start returned 1
  modcall[authenticate]: module "eap" returns handled for request 1
modcall: group authenticate returns handled for request 1
Sending Access-Challenge of id 2 to 172.18.0.28:32796
        EAP-Message = 0x016600060d20
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x89b3be3d0004829d6be986eb71f3283a
Finished request 1
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 172.18.0.28:32796, id=3, length=189
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0x535fafd07b98dded907fa6a22a103b85
        EAP-Message = 0x026600400d800000003616030100310100002d030146b6fdcd0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c000006000a002f00350100
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        State = 0x89b3be3d0004829d6be986eb71f3283a
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 2
  modcall[authorize]: module "preprocess" returns ok for request 2
  modcall[authorize]: module "chap" returns noop for request 2
  modcall[authorize]: module "mschap" returns noop for request 2
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 2
  rlm_eap: EAP packet type response id 102 length 64
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 2
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 2
modcall: group authorize returns updated for request 2
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 2
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls:  Length Included
  eaptls_verify returned 11
    (other): before/accept initialization
    TLS_accept: before/accept initialization
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0031], ClientHello
    TLS_accept: SSLv3 read client hello A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello
    TLS_accept: SSLv3 write server hello A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 0438], Certificate
    TLS_accept: SSLv3 write certificate A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 0061], CertificateRequest
    TLS_accept: SSLv3 write certificate request A
    TLS_accept: SSLv3 flush data
    TLS_accept:error in SSLv3 read client certificate A
In SSL Handshake Phase
In SSL Accept mode
hit in SSL is 0
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 2
modcall: group authenticate returns handled for request 2
Sending Access-Challenge of id 3 to 172.18.0.28:32796
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = 0x84269727edd58bb9e74f0203010001300d06092a8648
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xaa99bd1462f410dc11a6a6761de1dfc9
Finished request 2
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 172.18.0.28:32796, id=4, length=131
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0xf485eab3f9a19ea023622b1a731c590e
        EAP-Message = 0x026700060d00
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        State = 0xaa99bd1462f410dc11a6a6761de1dfc9
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 3
  modcall[authorize]: module "preprocess" returns ok for request 3
  modcall[authorize]: module "chap" returns noop for request 3
  modcall[authorize]: module "mschap" returns noop for request 3
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 3
  rlm_eap: EAP packet type response id 103 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 3
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 3
modcall: group authorize returns updated for request 3
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 3
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 3
modcall: group authenticate returns handled for request 3
Sending Access-Challenge of id 4 to 172.18.0.28:32796
        EAP-Message = [payload removed: 506 characters]
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xa8e5cef4dd04c58a12422974bc5e9067
Finished request 3
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 172.18.0.28:32796, id=5, length=1016
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0xef503c9ddc3fa507204420bee814019e
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 254 characters]
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        State = 0xa8e5cef4dd04c58a12422974bc5e9067
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 4
  modcall[authorize]: module "preprocess" returns ok for request 4
  modcall[authorize]: module "chap" returns noop for request 4
  modcall[authorize]: module "mschap" returns noop for request 4
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 4
  rlm_eap: EAP packet type response id 104 length 253
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 4
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 4
modcall: group authorize returns updated for request 4
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 4
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls:  Length Included
  eaptls_verify returned 11
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 021d], Certificate
chain-depth=0,
error=0
--> User-Name = spcoast1@alcatel.ro
--> BUF-Name = ca
--> subject = /C=ch/ST=sh/L=sh/O=asb/OU=rdr/CN=ca
--> issuer  = /C=ch/ST=sh/L=sh/O=asb/OU=rdr/CN=ca
--> verify return:1
    TLS_accept: SSLv3 read client certificate A
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange
    TLS_accept: SSLv3 read client key exchange A
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0086], CertificateVerify
  rlm_eap_tls: >>> TLS 1.0 Alert [length 0002], fatal decrypt_error
TLS Alert write:fatal:decrypt error
    TLS_accept:failed in SSLv3 read certificate verify B
12314:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100:
12314:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:618:
12314:error:1408807A:SSL routines:SSL3_GET_CERT_VERIFY:bad rsa signature:s3_srvr.c:1850:
12314:error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure:s3_pkt.c:837:
rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails.
rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails.
In SSL Handshake Phase
In SSL Accept mode
hit in SSL is 0
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 4
modcall: group authenticate returns handled for request 4
Sending Access-Challenge of id 5 to 172.18.0.28:32796
        EAP-Message = 0x016900110d800000000715030100020233
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x7034f050cb09b88bd8a1e3f22f5215b6
Finished request 4
Going to the next request
Waking up in 6 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 1 with timestamp 46b6fe6a
Cleaning up request 1 ID 2 with timestamp 46b6fe6a
Cleaning up request 2 ID 3 with timestamp 46b6fe6a
Cleaning up request 3 ID 4 with timestamp 46b6fe6a
Cleaning up request 4 ID 5 with timestamp 46b6fe6a
Nothing to do.  Sleeping until we see a request.

[root@Radius sbin]#


