        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 54Mbps 802.11g"
        EAP-Message = 0x020300060d00
        NAS-IP-Address = 192.168.1.202
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "ttls", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 3 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns noop
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1 
  eaptls_process returned 13 
++[eap] returns handled
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 424 characters]
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xc12f5c20c22b515967037c6c5beccf92
Finished request 125.
Going to the next request
Waking up in 4.0 seconds.
        Message-Authenticator = 0x166c2b12ab14ab768f5610222b8ba289
        Service-Type = Framed-User
        User-Name = "ttls\000"
        Framed-MTU = 1488
        State = 0xc12f5c20c22b515967037c6c5beccf92
        Called-Station-Id = "00-1E-C1-2D-D7-40:FCP_3COM"
        Calling-Station-Id = "00-05-C9-A1-C9-70"
        NAS-Identifier = "3Com Access Point 7760"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 54Mbps 802.11g"
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = 0x5d24d18cb97255261403010001011603010030b93b0fecb353228ab7434bb2f5bdcbf0f55c8e2a633653835fc5415535d493b2dd58b1cf94a7979368eafe0d322f2f0d
        NAS-IP-Address = 192.168.1.202
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "ttls", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 4 length 253
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns noop
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
  eaptls_verify returned 7 
  rlm_eap_tls: Done initial handshake
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0358], Certificate  
--> verify error:num=20:unable to get local issuer certificate 
  rlm_eap_tls: >>> TLS 1.0 Alert [length 0002], fatal unknown_ca  
TLS Alert write:fatal:unknown CA 
    TLS_accept:error in SSLv3 read client certificate B 
rlm_eap: SSL error error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails.
  eaptls_process returned 13 
  rlm_eap: Freeing handler
++[eap] returns reject
auth: Failed to validate the user.
Login incorrect: [ttls\000/<via Auth-Type = EAP>] (from client 192.168.1.202 port 1 cli 00-05-C9-A1-C9-70)
  Found Post-Auth-Type Reject
+- entering group REJECT
        expand: %{User-Name} -> ttls
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 126 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 126
        EAP-Message = 0x04040004
        Message-Authenticator = 0x00000000000000000000000000000000
Waking up in 1.0 seconds.
Cleaning up request 122 ID 0 with timestamp +199
Waking up in 0.3 seconds.
Cleaning up request 123 ID 1 with timestamp +199
Waking up in 0.3 seconds.
Cleaning up request 124 ID 2 with timestamp +200
Waking up in 0.3 seconds.
Cleaning up request 125 ID 3 with timestamp +200
Waking up in 2.9 seconds.
        Message-Authenticator = 0x4d9a9623cb2475dd10e22653c1a7ae4c
        Service-Type = Framed-User
        User-Name = "ttls\000"
        Framed-MTU = 1488
        Called-Station-Id = "00-1E-C1-2D-D7-40:FCP_3COM"
        Calling-Station-Id = "00-05-C9-A1-C9-70"
        NAS-Identifier = "3Com Access Point 7760"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 54Mbps 802.11g"
        EAP-Message = 0x020000090174746c73
        NAS-IP-Address = 192.168.1.202
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "ttls", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 0 length 9
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
rlm_pap: WARNING! No "known good" password found for the user.  Authentication may fail because of this.
++[pap] returns noop
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: EAP Identity
  rlm_eap: processing type tls
 rlm_eap_tls: Requiring client certificate
  rlm_eap_tls: Initiate
  rlm_eap_tls: Start returned 1
++[eap] returns handled
        EAP-Message = 0x010100060d20
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x633ee06f633fed565e6416f23cd6dda4
Finished request 127.
Going to the next request
Waking up in 0.6 seconds.
        Message-Authenticator = 0x6674fe99baaab5e60e7990a93c0d41e3
        Service-Type = Framed-User
        User-Name = "ttls\000"
        Framed-MTU = 1488
        State = 0x633ee06f633fed565e6416f23cd6dda4
        Called-Station-Id = "00-1E-C1-2D-D7-40:FCP_3COM"
        Calling-Station-Id = "00-05-C9-A1-C9-70"
        NAS-Identifier = "3Com Access Point 7760"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 54Mbps 802.11g"
        EAP-Message = [payload removed: 234 characters]
        NAS-IP-Address = 192.168.1.202
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "ttls", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 1 length 116
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns noop
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
  eaptls_verify returned 7 
  rlm_eap_tls: Done initial handshake
    (other): before/accept initialization 
    TLS_accept: before/accept initialization 
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0069], ClientHello  
    TLS_accept: SSLv3 read client hello A 
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello  
    TLS_accept: SSLv3 write server hello A 
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 07bc], Certificate  
    TLS_accept: SSLv3 write certificate A 
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 020d], ServerKeyExchange  
    TLS_accept: SSLv3 write key exchange A 
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 0088], CertificateRequest  
    TLS_accept: SSLv3 write certificate request A 
    TLS_accept: SSLv3 flush data 
    TLS_accept: Need to read more data: SSLv3 read client certificate A
In SSL Handshake Phase 
In SSL Accept mode  
  eaptls_process returned 13 
++[eap] returns handled
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = 0x003075310b30090603550406
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x633ee06f623ced565e6416f23cd6dda4
Finished request 128.
Going to the next request
Waking up in 0.3 seconds.
        Message-Authenticator = 0xcb8cb3b8f6e65e0fd04a0190f4a7ac0b
        Service-Type = Framed-User
        User-Name = "ttls\000"
        Framed-MTU = 1488
        State = 0x633ee06f623ced565e6416f23cd6dda4
        Called-Station-Id = "00-1E-C1-2D-D7-40:FCP_3COM"
        Calling-Station-Id = "00-05-C9-A1-C9-70"
        NAS-Identifier = "3Com Access Point 7760"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 54Mbps 802.11g"
        EAP-Message = 0x020200060d00
        NAS-IP-Address = 192.168.1.202
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "ttls", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 2 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns noop
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1 
  eaptls_process returned 13 
++[eap] returns handled
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = 0xe7f88e2e242f88162f88e616
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x633ee06f613ded565e6416f23cd6dda4
Finished request 129.
Going to the next request
Cleaning up request 126 ID 4 with timestamp +202
Waking up in 4.3 seconds.
        Message-Authenticator = 0xc5ef9c8a6f710e97046b6350a39b5bc5
        Service-Type = Framed-User
        User-Name = "ttls\000"
        Framed-MTU = 1488
        State = 0x633ee06f613ded565e6416f23cd6dda4
        Called-Station-Id = "00-1E-C1-2D-D7-40:FCP_3COM"
        Calling-Station-Id = "00-05-C9-A1-C9-70"
        NAS-Identifier = "3Com Access Point 7760"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 54Mbps 802.11g"
        EAP-Message = 0x020300060d00
        NAS-IP-Address = 192.168.1.202
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "ttls", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 3 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns noop
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1 
  eaptls_process returned 13 
++[eap] returns handled
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 424 characters]
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x633ee06f603aed565e6416f23cd6dda4
Finished request 130.
Going to the next request
Waking up in 4.0 seconds.
        Message-Authenticator = 0x2e039a51099ff7dc2812d5d147014a14
        Service-Type = Framed-User
        User-Name = "ttls\000"
        Framed-MTU = 1488
        State = 0x633ee06f603aed565e6416f23cd6dda4
        Called-Station-Id = "00-1E-C1-2D-D7-40:FCP_3COM"
        Calling-Station-Id = "00-05-C9-A1-C9-70"
        NAS-Identifier = "3Com Access Point 7760"
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 54Mbps 802.11g"
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = [payload removed: 508 characters]
        EAP-Message = 0x78d5256b3b6e9d1403010001011603010030f730bbfd2ddc9cc1de05fddabc585cfe98dcde89435f5a880b53d5cec78d0cb652a62bf0bcc4d7977d0927bf388decd1
        NAS-IP-Address = 192.168.1.202
        NAS-Port = 1
        NAS-Port-Id = "STA port # 1"
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "ttls", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 4 length 253
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns noop
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
  eaptls_verify returned 7 
  rlm_eap_tls: Done initial handshake
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0358], Certificate  
--> verify error:num=20:unable to get local issuer certificate 
  rlm_eap_tls: >>> TLS 1.0 Alert [length 0002], fatal unknown_ca  
TLS Alert write:fatal:unknown CA 
    TLS_accept:error in SSLv3 read client certificate B 
rlm_eap: SSL error error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails.
  eaptls_process returned 13 
  rlm_eap: Freeing handler
++[eap] returns reject
auth: Failed to validate the user.
Login incorrect: [ttls\000/<via Auth-Type = EAP>] (from client 192.168.1.202 port 1 cli 00-05-C9-A1-C9-70)
  Found Post-Auth-Type Reject
+- entering group REJECT
        expand: %{User-Name} -> ttls
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 131 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 131
        EAP-Message = 0x04040004
        Message-Authenticator = 0x00000000000000000000000000000000
Waking up in 1.0 seconds.

