rad_recv: Access-Request packet from host 172.18.0.28:32797, id=1, length=131
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0xc09296e0e297e91af27c633a5459d6ed
        EAP-Message = 0x02120018017370636f6173743140616c636174656c2e726f
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
  modcall[authorize]: module "chap" returns noop for request 0
  modcall[authorize]: module "mschap" returns noop for request 0
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 0
  rlm_eap: EAP packet type response id 18 length 24
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 0
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 0
modcall: group authorize returns updated for request 0
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 0
  rlm_eap: EAP Identity
  rlm_eap: processing type tls
  rlm_eap_tls: Initiate
  rlm_eap_tls: Start returned 1
  modcall[authenticate]: module "eap" returns handled for request 0
modcall: group authenticate returns handled for request 0
Sending Access-Challenge of id 1 to 172.18.0.28:32797
        EAP-Message = 0x011300061520
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x8c34538827939bb3bb1a0ecc2c37742f
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 172.18.0.28:32797, id=2, length=131
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0x899c7971f3d5894f1e1503f0bc45b10b
        EAP-Message = 0x02130006030d
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        State = 0x8c34538827939bb3bb1a0ecc2c37742f
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
  modcall[authorize]: module "preprocess" returns ok for request 1
  modcall[authorize]: module "chap" returns noop for request 1
  modcall[authorize]: module "mschap" returns noop for request 1
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 1
  rlm_eap: EAP packet type response id 19 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 1
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 1
modcall: group authorize returns updated for request 1
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 1
  rlm_eap: Request found, released from the list
  rlm_eap: EAP NAK
 rlm_eap: EAP-NAK asked for EAP-Type/tls
  rlm_eap: processing type tls
 rlm_eap_tls: Requiring client certificate
  rlm_eap_tls: Initiate
  rlm_eap_tls: Start returned 1
  modcall[authenticate]: module "eap" returns handled for request 1
modcall: group authenticate returns handled for request 1
Sending Access-Challenge of id 2 to 172.18.0.28:32797
        EAP-Message = 0x011400060d20
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x9c687e55b16b65767f05297e9f159b1a
Finished request 1
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 172.18.0.28:32797, id=3, length=189
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0x65ec1af79679d393051f016bc287687f
        EAP-Message = 0x021400400d800000003616030100310100002d030146b6fe360102030405060708090a0b0c0d0e0f101112131415161718191a1b1c000006000a002f00350100
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        State = 0x9c687e55b16b65767f05297e9f159b1a
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 2
  modcall[authorize]: module "preprocess" returns ok for request 2
  modcall[authorize]: module "chap" returns noop for request 2
  modcall[authorize]: module "mschap" returns noop for request 2
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 2
  rlm_eap: EAP packet type response id 20 length 64
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 2
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 2
modcall: group authorize returns updated for request 2
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 2
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls:  Length Included
  eaptls_verify returned 11
    (other): before/accept initialization
    TLS_accept: before/accept initialization
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0031], ClientHello
    TLS_accept: SSLv3 read client hello A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello
    TLS_accept: SSLv3 write server hello A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 0438], Certificate
    TLS_accept: SSLv3 write certificate A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 0061], CertificateRequest
    TLS_accept: SSLv3 write certificate request A
    TLS_accept: SSLv3 flush data
    TLS_accept:error in SSLv3 read client certificate A
In SSL Handshake Phase
In SSL Accept mode
hit in SSL is 0
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 2
modcall: group authenticate returns handled for request 2
Sending Access-Challenge of id 3 to 172.18.0.28:32797
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = 0x84269727edd58bb9e74f0203010001300d06092a8648
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x863fd5a12e04024670831e0699514147
Finished request 2
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 172.18.0.28:32797, id=4, length=131
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0x90f3b75208573fa8a083d29f6e815e62
        EAP-Message = 0x021500060d00
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        State = 0x863fd5a12e04024670831e0699514147
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 3
  modcall[authorize]: module "preprocess" returns ok for request 3
  modcall[authorize]: module "chap" returns noop for request 3
  modcall[authorize]: module "mschap" returns noop for request 3
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 3
  rlm_eap: EAP packet type response id 21 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 3
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 3
modcall: group authorize returns updated for request 3
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 3
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 3
modcall: group authenticate returns handled for request 3
Sending Access-Challenge of id 4 to 172.18.0.28:32797
        EAP-Message = [payload removed: 506 characters]
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x49573c95d7a0cceceaed8b40f8bb1829
Finished request 3
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 172.18.0.28:32797, id=5, length=1016
        Calling-Station-Id = "20-10-00-00-00-01"
        Message-Authenticator = 0x98eed031051d7876bfb180dd15190b23
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 254 characters]
        Framed-MTU = 3795
        User-Name = "spcoast1@alcatel.ro"
        NAS-IP-Address = 172.18.0.28
        State = 0x49573c95d7a0cceceaed8b40f8bb1829
        WiMAX-Attr-46 = 0x00250000100100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 4
  modcall[authorize]: module "preprocess" returns ok for request 4
  modcall[authorize]: module "chap" returns noop for request 4
  modcall[authorize]: module "mschap" returns noop for request 4
    rlm_realm: Looking up realm "alcatel.ro" for User-Name = "spcoast1@alcatel.ro"
    rlm_realm: Found realm "alcatel.ro"
    rlm_realm: Adding Stripped-User-Name = "spcoast1"
    rlm_realm: Proxying request from user spcoast1 to realm alcatel.ro
    rlm_realm: Adding Realm = "alcatel.ro"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 4
  rlm_eap: EAP packet type response id 22 length 253
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 4
    users: Matched entry DEFAULT at line 533
  modcall[authorize]: module "files" returns ok for request 4
modcall: group authorize returns updated for request 4
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 4
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls:  Length Included
  eaptls_verify returned 11
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 021d], Certificate
--> verify error:num=3:unable to get certificate CRL
chain-depth=0,
error=3
--> User-Name = spcoast1@alcatel.ro
--> BUF-Name = ca
--> subject = /C=ch/ST=sh/L=sh/O=asb/OU=rdr/CN=ca
--> issuer  = /C=ch/ST=sh/L=sh/O=asb/OU=rdr/CN=ca
--> verify return:0
  rlm_eap_tls: >>> TLS 1.0 Alert [length 0002], fatal unknown_ca
TLS Alert write:fatal:unknown CA
    TLS_accept:error in SSLv3 read client certificate B
12318:error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned:s3_srvr.c:2004:
rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails.
rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails.
In SSL Handshake Phase
In SSL Accept mode
hit in SSL is 0
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 4
modcall: group authenticate returns handled for request 4
Sending Access-Challenge of id 5 to 172.18.0.28:32797
        EAP-Message = 0x011700110d800000000715030100020230
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x5ac2eb0ff6b15fa879a2d5b335114359
Finished request 4
Going to the next request
Waking up in 6 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 1 with timestamp 46b6fed2
Cleaning up request 1 ID 2 with timestamp 46b6fed2
Cleaning up request 2 ID 3 with timestamp 46b6fed2
Cleaning up request 3 ID 4 with timestamp 46b6fed2
Cleaning up request 4 ID 5 with timestamp 46b6fed2
Nothing to do.  Sleeping until we see a request.



