<html><head><meta name="qrichtext" content="1" /></head><body style="font-size:10pt;font-family:Sans Serif">
<p>Le mardi 28 octobre 2008 10:19, tnt@kalik.net a écrit :</p>
<p>> Have you enabled sql in the accounting section? Can you post the</p>
<p>> freeradius debug (radiusd -X)? Accounting-Request should be coming</p>
<p>> straight after Access-Accept.</p>
<p></p>
<p>And a part of my hostapd debug :</p>
<p>RADIUS message: code=1 (Access-Request) identifier=13 length=205</p>
<p> Attribute 1 (User-Name) length=5</p>
<p> Value: 'bea'</p>
<p> Attribute 4 (NAS-IP-Address) length=6</p>
<p> Value: 10.3.1.1</p>
<p> Attribute 32 (NAS-Identifier) length=19</p>
<p> Value: 'private-network-1'</p>
<p> Attribute 5 (NAS-Port) length=6</p>
<p> Value: 0</p>
<p> Attribute 30 (Called-Station-Id) length=29</p>
<p> Value: '00-18-4D-76-22-19:Debian-AP'</p>
<p> Attribute 31 (Calling-Station-Id) length=19</p>
<p> Value: '00-1A-70-AE-D4-53'</p>
<p> Attribute 12 (Framed-MTU) length=6</p>
<p> Value: 1400</p>
<p> Attribute 61 (NAS-Port-Type) length=6</p>
<p> Value: 19</p>
<p> Attribute 77 (Connect-Info) length=22</p>
<p> Value: 'CONNECT 0Mbps 802.11'</p>
<p> Attribute 79 (EAP-Message) length=31</p>
<p> Value: 02 0f 00 1d 19 00 17 03 01 00 12 f9 58 45 e9 d6 44 be bd cf 76 8f 0e 15 39 6d 57 9d 58</p>
<p> Attribute 24 (State) length=18</p>
<p> Value: 2b 6f 35 1a 23 60 2c f5 d4 4f 03 71 be bd d5 61</p>
<p> Attribute 80 (Message-Authenticator) length=18</p>
<p> Value: 4e 6c 17 63 cb 4f 52 41 92 a0 25 8e 8b 93 ab 0e</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE</p>
<p>RADIUS message: code=11 (Access-Challenge) identifier=13 length=96</p>
<p> Attribute 79 (EAP-Message) length=40</p>
<p> Value: 01 10 00 26 19 00 17 03 01 00 1b 09 9f db b8 c3 59 e2 08 0e af 65 29 c7 5e 1f 37 57 d3 f9 4b 08 bd 5a 01 bb 08 9b</p>
<p> Attribute 80 (Message-Authenticator) length=18</p>
<p> Value: 55 9e 51 4e b2 1a b9 4f e1 80 9b c2 fd 58 78 a8</p>
<p> Attribute 24 (State) length=18</p>
<p> Value: 2b 6f 35 1a 22 7f 2c f5 d4 4f 03 71 be bd d5 61</p>
<p>RADIUS packet matching with station 00:1a:70:ae:d4:53</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state REQUEST</p>
<p>IEEE 802.1X: Sending EAP Packet to 00:1a:70:ae:d4:53 (identifier 16)</p>
<p>TX EAPOL - hexdump(len=56): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 00 00 26 01 10 00 26 19 00 17 03 01 00 1b 09 9f db b8 c3 59 e2 08 0e af 65 29 c7 5e 1f 37 57 d3 f9 4b 08 bd 5a 01 bb 08 9b</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE</p>
<p>IEEE 802.1X: 42 bytes from 00:1a:70:ae:d4:53</p>
<p> IEEE 802.1X: version=1 type=0 length=38</p>
<p> EAP: code=2 identifier=16 length=38 (response)</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state RESPONSE</p>
<p>Encapsulating EAP message into a RADIUS packet</p>
<p> Copied RADIUS State Attribute</p>
<p><span style="font-weight:600;color:#c10000">RADIUS message: code=1 (Access-Request) identifier=14 length=214</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 1 (User-Name) length=5</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: 'bea'</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 4 (NAS-IP-Address) length=6</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: 10.3.1.1</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 32 (NAS-Identifier) length=19</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: 'private-network-1'</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 5 (NAS-Port) length=6</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: 0</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 30 (Called-Station-Id) length=29</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: '00-18-4D-76-22-19:Debian-AP'</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 31 (Calling-Station-Id) length=19</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: '00-1A-70-AE-D4-53'</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 12 (Framed-MTU) length=6</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: 1400</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 61 (NAS-Port-Type) length=6</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: 19</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 77 (Connect-Info) length=22</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: 'CONNECT 0Mbps 802.11'</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 79 (EAP-Message) length=40</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: 02 10 00 26 19 00 17 03 01 00 1b 40 ca 97 50 69 d4 77 6f 15 57 b3 ee f3 ec 63 2e dd 93 b0 f1 7b f5 14 81 3b 7f 0b</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 24 (State) length=18</span></p>
<p><span style="font-weight:600;color:#c10000"> Value: 2b 6f 35 1a 22 7f 2c f5 d4 4f 03 71 be bd d5 61</span></p>
<p><span style="font-weight:600;color:#c10000"> Attribute 80 (Message-Authenticator) length=18</span></p>
<p> Value: 6d 79 43 5f 97 d1 ca c6 27 23 a3 60 11 a4 d1 7a</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE</p>
<p>RADIUS message: code=2 (Access-Accept) identifier=14 length=165</p>
<p> Attribute 26 (Vendor-Specific) length=58</p>
<p> Value: 00 00 01 37 11 34 81 e4 83 fe 13 8f 20 ac 61 72 f7 4d cc 93 46 7a 66 b5 ab 24 a8 47 a7 bf cf 0a 32 4a 70 03 88 d0 92 07 70 4e a0 8f cc d6 e2 7b 1a 9f b5 39 ad 2a 7e a5</p>
<p> Attribute 26 (Vendor-Specific) length=58</p>
<p> Value: 00 00 01 37 10 34 8a fb be 0d b7 12 ba 6f ff 36 d3 e6 b6 cf 6e 94 fb 85 99 41 66 62 bb b0 31 9e b9 ed 62 49 1a 21 bc 83 81 d1 c9 f9 05 d3 50 a6 9e 37 01 39 23 40 1d 68</p>
<p> Attribute 79 (EAP-Message) length=6</p>
<p> Value: 03 10 00 04</p>
<p> Attribute 80 (Message-Authenticator) length=18</p>
<p> Value: f5 48 97 70 6f 18 70 8d 27 46 16 8c e9 99 80 95</p>
<p> Attribute 1 (User-Name) length=5</p>
<p> Value: 'bea'</p>
<p>RADIUS packet matching with station 00:1a:70:ae:d4:53</p>
<p>MS-MPPE-Send-Key - hexdump(len=32): [REMOVED]</p>
<p>MS-MPPE-Recv-Key - hexdump(len=32): [REMOVED]</p>
<p>RSN: added PMKSA cache entry for 00:1a:70:ae:d4:53</p>
<p>RSN: added PMKID - hexdump(len=16): 20 80 83 37 6b 8f 4c 12 1c ad 8a 0f 08 20 a7 93</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state SUCCESS</p>
<p>IEEE 802.1X: Sending EAP Packet to 00:1a:70:ae:d4:53 (identifier 16)</p>
<p>TX EAPOL - hexdump(len=22): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 00 00 04 03 10 00 04</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state IDLE</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE</p>
<p>WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state INITPMK</p>
<p>WPA: PMK from EAPOL state machine (len=32)</p>
<p>WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKSTART</p>
<p>WPA: Send EAPOL(secure=0 mic=0 ack=1 install=0 pairwise=8 kde_len=22 keyidx=0 encr=0)</p>
<p>TX EAPOL - hexdump(len=135): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 01 8c 1a c0 22 01 b5 17 73 2c 5e 8b 38 3c 2a 5a c5 c6 a7 78 79 0a bd 12 45 26 8b 94 8e 5d 40 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 dd 14 00 0f ac 04 20 80 83 37 6b 8f 4c 12 1c ad 8a 0f 08 20 a7 93</p>
<p>IEEE 802.1X: 121 bytes from 00:1a:70:ae:d4:53</p>
<p> IEEE 802.1X: version=1 type=3 length=117</p>
<p>WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKCALCNEGOTIATING</p>
<p>PMK - hexdump(len=32): [REMOVED]</p>
<p>PTK - hexdump(len=64): [REMOVED]</p>
<p>WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKCALCNEGOTIATING2</p>
<p>WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKINITNEGOTIATING</p>
<p>madwifi_get_seqnum: addr=00:00:00:00:00:00 idx=1</p>
<p>WPA: Send EAPOL(secure=1 mic=1 ack=1 install=1 pairwise=8 kde_len=66 keyidx=1 encr=1)</p>
<p>Plaintext EAPOL-Key Key Data - hexdump(len=80): [REMOVED]</p>
<p>TX EAPOL - hexdump(len=193): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 03 00 af 02 13 ca 00 10 00 00 00 00 00 00 00 02 8c 1a c0 22 01 b5 17 73 2c 5e 8b 38 3c 2a 5a c5 c6 a7 78 79 0a bd 12 45 26 8b 94 8e 5d 40 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 50 25 68 b4 cb fc 7c 34 30 1f 98 83 ff 1b c0 00 50 75 6a d4 10 9f c4 77 31 ca 59 eb ef 27 9d be bf 81 15 5b 78 70 0a 10 50 9f fd 33 71 9d fd 3e a2 1c ae 6d 6b d1 15 6c 61 13 3f ed 1b a8 86 1b a9 db 4d 3f d9 c4 f7 a4 21 91 fc 07 33 93 9e 3b d0 f2 6c ef 32 91 d3 13 06 1b 3a 32 e7 e0 62 ea 0b</p>
<p>IEEE 802.1X: 99 bytes from 00:1a:70:ae:d4:53</p>
<p> IEEE 802.1X: version=1 type=3 length=95</p>
<p>WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKINITDONE</p>
<p>madwifi_set_key: alg=CCMP addr=00:1a:70:ae:d4:53 key_idx=0</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 AUTH_PAE entering state AUTHENTICATED</p>
<p>madwifi_set_sta_authorized: addr=00:1a:70:ae:d4:53 authorized=1</p>
<p>madwifi_sta_clear_stats: addr=00:1a:70:ae:d4:53</p>
<p><span style="font-weight:600;color:#b31610">RADIUS message: code=4 (Accounting-Request) identifier=15 length=163</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 44 (Acct-Session-Id) length=19</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: '4906E22C-00000000'</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 40 (Acct-Status-Type) length=6</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: 1</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 45 (Acct-Authentic) length=6</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: 1</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 1 (User-Name) length=5</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: 'bea'</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 4 (NAS-IP-Address) length=6</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: 10.3.1.1</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 32 (NAS-Identifier) length=19</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: 'private-network-1'</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 5 (NAS-Port) length=6</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: 0</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 30 (Called-Station-Id) length=29</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: '00-18-4D-76-22-19:Debian-AP'</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 31 (Calling-Station-Id) length=19</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: '00-1A-70-AE-D4-53'</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 61 (NAS-Port-Type) length=6</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: 19</span></p>
<p><span style="font-weight:600;color:#b31610"> Attribute 77 (Connect-Info) length=22</span></p>
<p><span style="font-weight:600;color:#b31610"> Value: 'CONNECT 0Mbps 802.11'</span></p>
<p><span style="font-weight:600;color:#b31610">RSN: added PMKSA cache entry for 00:1a:70:ae:d4:53</span></p>
<p>RSN: added PMKID - hexdump(len=16): 20 80 83 37 6b 8f 4c 12 1c ad 8a 0f 08 20 a7 93</p>
<p>IEEE 802.1X: 00:1a:70:ae:d4:53 - aWhile --> 0</p>
</body></html>