FreeRADIUS Version 2.1.1, for host i686-pc-linux-gnu, built on Oct 15 2008 at 03:59:11
Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License v2.
Starting - reading configuration files ...
including configuration file /usr/local/radius/etc/raddb/radiusd.conf
including configuration file /usr/local/radius/etc/raddb/proxy.conf
including configuration file /usr/local/radius/etc/raddb/clients.conf
including files in directory /usr/local/radius/etc/raddb/modules/
including configuration file /usr/local/radius/etc/raddb/modules/preprocess
including configuration file /usr/local/radius/etc/raddb/modules/krb5
including configuration file /usr/local/radius/etc/raddb/modules/counter
including configuration file /usr/local/radius/etc/raddb/modules/unix
including configuration file /usr/local/radius/etc/raddb/modules/mschap
including configuration file /usr/local/radius/etc/raddb/modules/always
including configuration file /usr/local/radius/etc/raddb/modules/expiration
including configuration file /usr/local/radius/etc/raddb/modules/policy
including configuration file /usr/local/radius/etc/raddb/modules/mac2vlan
including configuration file /usr/local/radius/etc/raddb/modules/sql_log
including configuration file /usr/local/radius/etc/raddb/modules/acct_unique
including configuration file /usr/local/radius/etc/raddb/modules/chap
including configuration file /usr/local/radius/etc/raddb/modules/pap
including configuration file /usr/local/radius/etc/raddb/modules/checkval
including configuration file /usr/local/radius/etc/raddb/modules/smbpasswd
including configuration file /usr/local/radius/etc/raddb/modules/sradutmp
including configuration file /usr/local/radius/etc/raddb/modules/radutmp
including configuration file /usr/local/radius/etc/raddb/modules/files
including configuration file /usr/local/radius/etc/raddb/modules/ippool
including configuration file /usr/local/radius/etc/raddb/modules/attr_rewrite
including configuration file /usr/local/radius/etc/raddb/modules/mac2ip
including configuration file /usr/local/radius/etc/raddb/modules/expr
including configuration file /usr/local/radius/etc/raddb/modules/logintime
including configuration file /usr/local/radius/etc/raddb/modules/pam
including configuration file /usr/local/radius/etc/raddb/modules/passwd
including configuration file /usr/local/radius/etc/raddb/modules/linelog
including configuration file /usr/local/radius/etc/raddb/modules/inner-eap
including configuration file /usr/local/radius/etc/raddb/modules/digest
including configuration file /usr/local/radius/etc/raddb/modules/attr_filter
including configuration file /usr/local/radius/etc/raddb/modules/echo
including configuration file /usr/local/radius/etc/raddb/modules/detail.example.com
including configuration file /usr/local/radius/etc/raddb/modules/detail.log
including configuration file /usr/local/radius/etc/raddb/modules/etc_group
including configuration file /usr/local/radius/etc/raddb/modules/realm
including configuration file /usr/local/radius/etc/raddb/modules/wimax
including configuration file /usr/local/radius/etc/raddb/modules/exec
including configuration file /usr/local/radius/etc/raddb/modules/detail
including configuration file /usr/local/radius/etc/raddb/modules/ldap
including configuration file /usr/local/radius/etc/raddb/eap.conf
including configuration file /usr/local/radius/etc/raddb/sql.conf
including configuration file /usr/local/radius/etc/raddb/sql/mysql/dialup.conf
including configuration file /usr/local/radius/etc/raddb/sql/mysql/counter.conf
including configuration file /usr/local/radius/etc/raddb/policy.conf
including files in directory /usr/local/radius/etc/raddb/sites-enabled/
including configuration file /usr/local/radius/etc/raddb/sites-enabled/inner-tunnel
including configuration file /usr/local/radius/etc/raddb/sites-enabled/default
including dictionary file /usr/local/radius/etc/raddb/dictionary
main {
        prefix = "/usr/local/radius"
        localstatedir = "/usr/local/radius/var"
        logdir = "/usr/local/radius/var/log/radius"
        libdir = "/usr/local/radius/lib"
        radacctdir = "/usr/local/radius/var/log/radius/radacct"
        hostname_lookups = no
        max_request_time = 30
        cleanup_delay = 5
        max_requests = 1024
        allow_core_dumps = no
        pidfile = "/usr/local/radius/var/run/radiusd/radiusd.pid"
        checkrad = "/usr/local/radius/sbin/checkrad"
        debug_level = 0
        proxy_requests = yes
 log {
        stripped_names = no
        auth = no
        auth_badpass = no
        auth_goodpass = no
 }
 security {
        max_attributes = 200
        reject_delay = 1
        status_server = yes
 }
}
 client localhost {
        ipaddr = 127.0.0.1
        require_message_authenticator = no
        secret = "testing123"
        nastype = "other"
 }
 client 192.168.5.0/24 {
        require_message_authenticator = no
        secret = "testing123"
        shortname = "WLAN"
 }
radiusd: #### Loading Realms and Home Servers ####
 proxy server {
        retry_delay = 5
        retry_count = 3
        default_fallback = no
        dead_time = 120
        wake_all_if_all_dead = no
 }
 home_server localhost {
        ipaddr = 127.0.0.1
        port = 1812
        type = "auth"
        secret = "testing123"
        response_window = 20
        max_outstanding = 65536
        zombie_period = 40
        status_check = "status-server"
        ping_interval = 30
        check_interval = 30
        num_answers_to_alive = 3
        num_pings_to_alive = 3
        revive_interval = 120
        status_check_timeout = 4
 }
 home_server_pool my_auth_failover {
        type = fail-over
        home_server = localhost
 }
 realm example.com {
        auth_pool = my_auth_failover
 }
 realm LOCAL {
 }
radiusd: #### Instantiating modules ####
 instantiate {
 Module: Linked to module rlm_exec
 Module: Instantiating exec
  exec {
        wait = no
        input_pairs = "request"
        shell_escape = yes
  }
 Module: Linked to module rlm_expr
 Module: Instantiating expr
 Module: Linked to module rlm_expiration
 Module: Instantiating expiration
  expiration {
        reply-message = "Password Has Expired  "
  }
 Module: Linked to module rlm_logintime
 Module: Instantiating logintime
  logintime {
        reply-message = "You are calling outside your allowed timespan  "
        minimum-timeout = 60
  }
 }
radiusd: #### Loading Virtual Servers ####
server inner-tunnel {
 modules {
 Module: Checking authenticate {...} for more modules to load
 Module: Linked to module rlm_pap
 Module: Instantiating pap
  pap {
        encryption_scheme = "auto"
        auto_header = no
  }
 Module: Linked to module rlm_chap
 Module: Instantiating chap
 Module: Linked to module rlm_mschap
 Module: Instantiating mschap
  mschap {
        use_mppe = yes
        require_encryption = no
        require_strong = no
        with_ntdomain_hack = no
  }
 Module: Linked to module rlm_unix
 Module: Instantiating unix
  unix {
        radwtmp = "/usr/local/radius/var/log/radius/radwtmp"
  }
 Module: Linked to module rlm_eap
 Module: Instantiating eap
  eap {
        default_eap_type = "peap"
        timer_expire = 60
        ignore_unknown_eap_types = no
        cisco_accounting_username_bug = no
        max_sessions = 2048
  }
 Module: Linked to sub-module rlm_eap_leap
 Module: Instantiating eap-leap
 Module: Linked to sub-module rlm_eap_gtc
 Module: Instantiating eap-gtc
   gtc {
        challenge = "Password: "
        auth_type = "PAP"
   }
 Module: Linked to sub-module rlm_eap_tls
 Module: Instantiating eap-tls
   tls {
        rsa_key_exchange = no
        dh_key_exchange = yes
        rsa_key_length = 512
        dh_key_length = 512
        verify_depth = 0
        pem_file_type = yes
        private_key_file = "/usr/local/radius/etc/raddb/certs/server.pem"
        certificate_file = "/usr/local/radius/etc/raddb/certs/server.pem"
        CA_file = "/usr/local/radius/etc/raddb/certs/ca.pem"
        private_key_password = "whatever"
        dh_file = "/usr/local/radius/etc/raddb/certs/dh"
        random_file = "/usr/local/radius/etc/raddb/certs/random"
        fragment_size = 1024
        include_length = yes
        check_crl = no
        cipher_list = "DEFAULT"
    cache {
        enable = no
        lifetime = 24
        max_entries = 255
    }
   }
 Module: Linked to sub-module rlm_eap_ttls
 Module: Instantiating eap-ttls
   ttls {
        default_eap_type = "mschapv2"
        copy_request_to_tunnel = no
        use_tunneled_reply = no
        virtual_server = "inner-tunnel"
   }
 Module: Linked to sub-module rlm_eap_peap
 Module: Instantiating eap-peap
   peap {
        default_eap_type = "tls"
        copy_request_to_tunnel = no
        use_tunneled_reply = no
        proxy_tunneled_request_as_eap = yes
        virtual_server = "inner-tunnel"
   }
 Module: Linked to sub-module rlm_eap_md5
 Module: Instantiating eap-md5
 Module: Checking authorize {...} for more modules to load
 Module: Linked to module rlm_realm
 Module: Instantiating suffix
  realm suffix {
        format = "suffix"
        delimiter = "@"
        ignore_default = no
        ignore_null = no
  }
 Module: Linked to module rlm_files
 Module: Instantiating files
  files {
        usersfile = "/usr/local/radius/etc/raddb/users"
        acctusersfile = "/usr/local/radius/etc/raddb/acct_users"
        preproxy_usersfile = "/usr/local/radius/etc/raddb/preproxy_users"
        compat = "no"
  }
 Module: Checking session {...} for more modules to load
 Module: Linked to module rlm_radutmp
 Module: Instantiating radutmp
  radutmp {
        filename = "/usr/local/radius/var/log/radius/radutmp"
        username = "%{User-Name}"
        case_sensitive = yes
        check_with_nas = yes
        perm = 384
        callerid = yes
  }
 Module: Checking post-proxy {...} for more modules to load
 Module: Checking post-auth {...} for more modules to load
 Module: Linked to module rlm_attr_filter
 Module: Instantiating attr_filter.access_reject
  attr_filter attr_filter.access_reject {
        attrsfile = "/usr/local/radius/etc/raddb/attrs.access_reject"
        key = "%{User-Name}"
  }
 }
}
 modules {
 Module: Checking authenticate {...} for more modules to load
 Module: Checking authorize {...} for more modules to load
 Module: Linked to module rlm_preprocess
 Module: Instantiating preprocess
  preprocess {
        huntgroups = "/usr/local/radius/etc/raddb/huntgroups"
        hints = "/usr/local/radius/etc/raddb/hints"
        with_ascend_hack = no
        ascend_channels_per_line = 23
        with_ntdomain_hack = no
        with_specialix_jetstream_hack = no
        with_cisco_vsa_hack = no
        with_alvarion_vsa_hack = no
  }
 Module: Checking preacct {...} for more modules to load
 Module: Linked to module rlm_acct_unique
 Module: Instantiating acct_unique
  acct_unique {
        key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"
  }
 Module: Checking accounting {...} for more modules to load
 Module: Linked to module rlm_detail
 Module: Instantiating detail
  detail {
        detailfile = "/usr/local/radius/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
        header = "%t"
        detailperm = 384
        dirperm = 493
        locking = no
        log_packet_header = no
  }
 Module: Instantiating attr_filter.accounting_response
  attr_filter attr_filter.accounting_response {
        attrsfile = "/usr/local/radius/etc/raddb/attrs.accounting_response"
        key = "%{User-Name}"
  }
 Module: Checking session {...} for more modules to load
 Module: Checking post-proxy {...} for more modules to load
 Module: Checking post-auth {...} for more modules to load
 }
radiusd: #### Opening IP addresses and Ports ####
listen {
        type = "auth"
        ipaddr = *
        port = 0
}
listen {
        type = "acct"
        ipaddr = *
        port = 0
}
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=85, length=174
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x0201000c01717565656e6965
        Message-Authenticator = 0x194f38387097dcf321b8a61b0061b6a0
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 1 length 12
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
[files] users: Matched entry queenie at line 91
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] Found existing Auth-Type, not changing it.
++[pap] returns noop
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] EAP Identity
[eap] processing type tls
[tls] Initiate
[tls] Start returned 1
++[eap] returns handled
Sending Access-Challenge of id 85 to 192.168.5.200 port 1027
        Reply-Message = "Hello, queenie"
        EAP-Message = 0x010200061920
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xac5ace1dac58d7b0f4f517f022338120
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=86, length=280
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x0202006419800000005a16030100550100005103014912c06b791705498b454c12bb26e9f8a4e19d19715be598b51abda85142de7000002a00160013006600150012000a0005000400070009006300650060006200610064001400110003000600080100
        State = 0xac5ace1dac58d7b0f4f517f022338120
        Message-Authenticator = 0x4a2a59e77f91a890f139d36777a1409a
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 2 length 100
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
  TLS Length 90
[peap] Length Included
[peap] eaptls_verify returned 11
[peap]     (other): before/accept initialization
[peap]     TLS_accept: before/accept initialization
[peap] <<< TLS 1.0 Handshake [length 0055], ClientHello
[peap]     TLS_accept: SSLv3 read client hello A
[peap] >>> TLS 1.0 Handshake [length 002a], ServerHello
[peap]     TLS_accept: SSLv3 write server hello A
[peap] >>> TLS 1.0 Handshake [length 085e], Certificate
[peap]     TLS_accept: SSLv3 write certificate A
[peap] >>> TLS 1.0 Handshake [length 020d], ServerKeyExchange
[peap]     TLS_accept: SSLv3 write key exchange A
[peap] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone
[peap]     TLS_accept: SSLv3 write server done A
[peap]     TLS_accept: SSLv3 flush data
[peap]     TLS_accept: Need to read more data: SSLv3 read client certificate A
In SSL Handshake Phase
In SSL Accept mode
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 86 to 192.168.5.200 port 1027
        EAP-Message = 0x0103040019c000000aad160301002a020000260301491265a9895eca4b3a74b7f624898aed3e78e5fdaecab406b58e995c9d6c736800001600160301085e0b00085a0008570003a6308203a23082028aa003020102020101300d06092a864886f70d0101040500308193310b3009060355
040613024652310f300d060355040813065261646975733112301006035504071309536f6d65776865726531153013060355040a130c4578616d706c65204
96e632e3120301e06092a864886f70d010901161161646d696e406578616d706c652e636f6d312630240603550403131d4578616d706c6520436572746966
696361746520417574686f72697479
        EAP-Message = 0x301e170d3038313031343232333334365a170d3039313031343232333334365a307c310b3009060355040613024652310f300
d0603550408130652616469757331153013060355040a130c4578616d706c6520496e632e312330210603550403131a4578616d706c652053657276657220
43657274696669636174653120301e06092a864886f70d010901161161646d696e406578616d706c652e636f6d30820122300d06092a864886f70d0101010
5000382010f003082010a0282010100dafe6cffec28472f8235792f34da8866ee3a05eb5495478eb170f3e316886f86ed9163b571d1fefe8c23f9ab52d7fe
3cf78fb57eec2a5c422e4bcc9ad0e8
        EAP-Message = 0x25b6cecb691d5d9a8e76977ee1f9ebece572c7bad2c25d0bed2be00913b0e1f9ca7e21d35265d22a2d6bd0b116dcba9586344
395ae4bce9b87c6c84f4180f7dae3fb28863e7006092ee1ab51e1cf2b9d34262ea7a711b2a2f41498a99b26dae643b195500d7c84eb35743ec1941fbc065b
281781c49a355b7a7b373778485425f0c3d488fccbebd95b1b95c5963259eaa36916b028c79c4046ec1a46f5a82b578cd1b0679d911cbab8ae7895eba49bd
821e3804fe05485b339f5dd3549bfb5a681e10203010001a317301530130603551d25040c300a06082b06010505070301300d06092a864886f70d01010405
0003820101004091d2fd0b833224be
        EAP-Message = 0x9764348b7c0808171b5cfe2c509ba90817a4a4fe8a1f59c135b9171cc8c5e06d62cd7a1dd0e38f4d05c6e293654d36a4a3307
568cc00a3abe3d954d6ed0e2f073ee44ac699775221b0f7b6a15d9f0f7e28057c01580129736864bedc411f922e613b62633e7d87d5b2304ac3a37d4264e3
e2c0a71ab85e0f1ef4afe882bd3dba184ce8d372b39afcfe5491bcbfc935829b68c9ddb5b891878faac48dd138719cafcc32062a0f3dd1706211bc2ce5ffa
f7947971a0e046534a9aa5102c554e071b9121159a74326b1db8b199b2db6d9059baa2772857fab6eed7ab2cdde4c66430724856a660969008cf43df2ba8e
5ce7eb2f22eb0ab87e0004ab308204
        EAP-Message = 0xa73082038fa0030201020209
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xac5ace1dad59d7b0f4f517f022338120
Finished request 1.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=87, length=186
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x020300061900
        State = 0xac5ace1dad59d7b0f4f517f022338120
        Message-Authenticator = 0xe705d8162a127e3c18d911e7a9853a12
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 3 length 6
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] Received TLS ACK
[peap] ACK handshake fragment handler
[peap] eaptls_verify returned 1
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 87 to 192.168.5.200 port 1027
        EAP-Message = 0x010403fc194000e358ff266427a3dd300d06092a864886f70d0101050500308193310b3009060355040613024652310f300d0
60355040813065261646975733112301006035504071309536f6d65776865726531153013060355040a130c4578616d706c6520496e632e3120301e06092a
864886f70d010901161161646d696e406578616d706c652e636f6d312630240603550403131d4578616d706c6520436572746966696361746520417574686
f72697479301e170d3038313031343232333334365a170d3038313131333232333334365a308193310b3009060355040613024652310f300d060355040813
065261646975733112301006035504
        EAP-Message = 0x071309536f6d65776865726531153013060355040a130c4578616d706c6520496e632e3120301e06092a864886f70d0109011
61161646d696e406578616d706c652e636f6d312630240603550403131d4578616d706c6520436572746966696361746520417574686f7269747930820122
300d06092a864886f70d01010105000382010f003082010a0282010100cf5fdd85362a3a7e80cb6fc1a86f2c2e601caa332276f16ca874929e964562f4a7f
ea4be42cddc7e48509dec567663524213a73c969c51049339c031cd1ac21e6c06b83bd7e59e87f77c149d73da327990fc6e2c78dc0871437430ee71e46da7
9fc449eebe003e0f973a4b68a9833e
        EAP-Message = 0x242a80ca24d0b4f3cce7fab54fa02fb31070be439159b3982b115f7d3250b7e512e5220827aacff9d5036dfb0ab4277fa2506
07fd3923ce5bfd561573c5ccc8b15613ce45cad9ccad3336d3d6c865f08a18504bb2e7c5fd3699e48ce2e7140abf2407fb38212fac658d1a27e8f9e0341c5
0754b42cd3f6e6fc528e7d277139ea4e36e51fb0b2d2216fce33a2e585857f550203010001a381fb3081f8301d0603551d0e04160414b1ca5a2d8c6d48cba
a188a838ee32984bea6da053081c80603551d230481c03081bd8014b1ca5a2d8c6d48cbaa188a838ee32984bea6da05a18199a48196308193310b30090603
55040613024652310f300d06035504
        EAP-Message = 0x0813065261646975733112301006035504071309536f6d65776865726531153013060355040a130c4578616d706c6520496e6
32e3120301e06092a864886f70d010901161161646d696e406578616d706c652e636f6d312630240603550403131d4578616d706c65204365727469666963
61746520417574686f72697479820900e358ff266427a3dd300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100cb030668f
187cc6027eb2ec47f0a386ea477bc775193fa62c6fb6182facf6cbc8861060373101b13ad13284195f045b1730c69782ef6765b57c897199cd64ae1b9110e
4d7748ea3b3b62bef8d4ca9cc0fe4e
        EAP-Message = 0xf7da5014e426f0a6
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xac5ace1dae5ed7b0f4f517f022338120
Finished request 2.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=88, length=186
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x020400061900
        State = 0xac5ace1dae5ed7b0f4f517f022338120
        Message-Authenticator = 0x8d050287e773e8695b744d10ef774412
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 4 length 6
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] Received TLS ACK
[peap] ACK handshake fragment handler
[peap] eaptls_verify returned 1
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 88 to 192.168.5.200 port 1027
        EAP-Message = 0x010502c719004e071ea95e3d7726e47f44c7cada8299cb134d5f0fbc491f7a1b8dcf8b014cc36f95a4d15cddcc861f2fa61c5
433d2f417cdceda75620bd687128300957c99c8e8a1ed728f992ad98187abb16d10be7f4728242a89d18cf3b909fc50ea7b0044e32483860426732d83c107
bc648fa7326fc71665dfa6cf60108aaaa8713b4f36b9a942fdf56e5ca530bace2a81b8db083bc3015d0cd19db23d09c59b765f3bf182ac28b463271603010
20d0c0002090080ca6b6b090d42dbd654e500e15188e1f8db31d77b18d37bae34d299d06c5e6b5a59b670a81389f7101ee8b070444fb8587b8d26e797175d
316e46411dbd7d700ac3fbe0b85496
        EAP-Message = 0xcae6ec2286040c046c79931d291755387e002808e0d95d2c0276f20623955173768285a1e80665364ff7971f05d91421dbcac745d421f74d287300010200806e997f0ff8c375bd3210fde39a0f6f77b7e5b87154f6d47e556134604681fb84227f1686ac5fe197ac4b750e601690ee5129
0c56a8e437f60958db07673471eb1f1b96ebbdaf103e0ac374e4b80f6bbb48b1ff00b37ef6ab331b022170e94d09f5b4692972c2aef54cab72a97e830c236
0c281c937246fce315f3e7cafb1e5090100acb5f364d05cf455286a03e961210c412f13178bea5f1fa14c438bfcb7e5bfd968334192dce4c6fdc24cea3688
c9bbea78921cb08b796e3740fd62a5
        EAP-Message = 0x930b0cf89d09c993433f21d48dea443fceb7009157cc11c4280640de57319120bf71319e65af5edbf3d4fb097b488f63ec4d7
6eac8f092a399029da1f5bbe743210f212fccdde6fae1dd40a8c9ad0b3f0d57f3b84e040de1dd13197e52ce766cfc105e0084be10879480c3265c91b3bf0e
c82af72ecd2b893e642c22ddc151e108222cd555b2382fab3e7642645306709408a516d20bf7f65c9db1301297fa0fc26bddc28a869784d86fd09029c467d
d50d7fc346917e48f2f23d2944045b94b8a11d7e316030100040e000000
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xac5ace1daf5fd7b0f4f517f022338120
Finished request 3.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=89, length=380
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x020500c81980000000be160301008610000082008001095a91826b244c5da1230d20258729f232aa2e5cfb81e2182893150ea
03f69d87d3d597fa682381c453be03183e5f99fbaced1d846298b4ada043bf601fbaf83ab4d92f9b07a5afc27927780098f8c026663d947c446f252828801
6278d358de54f06a75551ade2dd0bd8336745590296e26e545d1272dbe06da27127e22c714030100010116030100280e2e51a937bed5030172f37516ed9c5
1f499f8a3a94c2c4d19e79a751f16eb965c324cdb4d604946
        State = 0xac5ace1daf5fd7b0f4f517f022338120
        Message-Authenticator = 0x5a9b7bec522226b11b327917c25e9faa
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 5 length 200
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
  TLS Length 190
[peap] Length Included
[peap] eaptls_verify returned 11
[peap] <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange
[peap]     TLS_accept: SSLv3 read client key exchange A
[peap] <<< TLS 1.0 ChangeCipherSpec [length 0001]
[peap] <<< TLS 1.0 Handshake [length 0010], Finished
[peap]     TLS_accept: SSLv3 read finished A
[peap] >>> TLS 1.0 ChangeCipherSpec [length 0001]
[peap]     TLS_accept: SSLv3 write change cipher spec A
[peap] >>> TLS 1.0 Handshake [length 0010], Finished
[peap]     TLS_accept: SSLv3 write finished A
[peap]     TLS_accept: SSLv3 flush data
[peap]     (other): SSL negotiation finished successfully
SSL Connection Established
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 89 to 192.168.5.200 port 1027
        EAP-Message = 0x01060039190014030100010116030100287dca8ce939c26968caa36341d7e8c65bd55e9554c950e29cf326669ee095b896678
e390fea56c78b
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xac5ace1da85cd7b0f4f517f022338120
Finished request 4.
Going to the next request
Waking up in 4.7 seconds.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=90, length=186
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x020600061900
        State = 0xac5ace1da85cd7b0f4f517f022338120
        Message-Authenticator = 0x3402959acaa38fe46df2ebdfd268bcda
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 6 length 6
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] Received TLS ACK
[peap] ACK handshake is finished
[peap] eaptls_verify returned 3
[peap] eaptls_process returned 3
[peap] EAPTLS_SUCCESS
++[eap] returns handled
Sending Access-Challenge of id 90 to 192.168.5.200 port 1027
        EAP-Message = 0x0107002b1900170301002023294d9d5d5b89d1c61913986c6beb7eeb7b4c0bf3d840aa4b21416cff10c724
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xac5ace1da95dd7b0f4f517f022338120
Finished request 5.
Going to the next request
Waking up in 4.7 seconds.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=91, length=252
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x02070048190017030100189b5096ced95887e894a1159f42a2511d03c53dfac20920491703010020b513e31c48fee95a8e023
151d133d6bcca3672a28d233deaaa42034cca6f2d07
        State = 0xac5ace1da95dd7b0f4f517f022338120
        Message-Authenticator = 0x90eec23afaa7290e286a52febb4c2325
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 7 length 72
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established.  Decoding tunneled attributes.
[peap] Identity - queenie
[peap] Got tunnled request
        EAP-Message = 0x0207000c01717565656e6965
server (null) {
  PEAP: Got tunneled identity of queenie
  PEAP: Setting default EAP type for tunneled EAP session.
  PEAP: Setting User-Name to queenie
Sending tunneled request
        EAP-Message = 0x0207000c01717565656e6965
        FreeRADIUS-Proxied-To = 127.0.0.1
        User-Name = "queenie"
server inner-tunnel {
+- entering group authorize {...}
++[chap] returns noop
++[mschap] returns noop
++[unix] returns notfound
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
++[control] returns noop
[eap] EAP packet type response id 7 length 12
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
[files] users: Matched entry queenie at line 91
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] Found existing Auth-Type, not changing it.
++[pap] returns noop
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] EAP Identity
[eap] processing type tls
[tls] Requiring client certificate
[tls] Initiate
[tls] Start returned 1
++[eap] returns handled
} # server inner-tunnel
[peap] Got tunneled reply code 11
        Reply-Message = "Hello, queenie"
        EAP-Message = 0x010800060d20
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xcec54cd4cecd411d16e979e447d690e2
[peap] Got tunneled reply RADIUS code 11
        Reply-Message = "Hello, queenie"
        EAP-Message = 0x010800060d20
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xcec54cd4cecd411d16e979e447d690e2
[peap] Got tunneled Access-Challenge
++[eap] returns handled
Sending Access-Challenge of id 91 to 192.168.5.200 port 1027
        EAP-Message = 0x010800231900170301001805d153ccdd0ed725108f00f66b177febf872b301c6516265
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xac5ace1daa52d7b0f4f517f022338120
Finished request 6.
Going to the next request
Waking up in 4.7 seconds.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=92, length=244
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x02080040190017030100189ee5cb0d78d421eaa5ba803642f05400bd2ceba26f7653171703010018fef6b89d20b66134d83a8
82eca63d2e49373352418034fb3
        State = 0xac5ace1daa52d7b0f4f517f022338120
        Message-Authenticator = 0x278a1fb5cbc9051c92c84d8ff7cad657
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 8 length 64
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established.  Decoding tunneled attributes.
[peap] EAP type nak
[peap] Got tunnled request
        EAP-Message = 0x020800060304
server (null) {
  PEAP: Setting User-Name to queenie
Sending tunneled request
        EAP-Message = 0x020800060304
        FreeRADIUS-Proxied-To = 127.0.0.1
        User-Name = "queenie"
        State = 0xcec54cd4cecd411d16e979e447d690e2
server inner-tunnel {
+- entering group authorize {...}
++[chap] returns noop
++[mschap] returns noop
++[unix] returns notfound
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
++[control] returns noop
[eap] EAP packet type response id 8 length 6
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
[files] users: Matched entry queenie at line 91
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] Found existing Auth-Type, not changing it.
++[pap] returns noop
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP NAK
[eap] EAP-NAK asked for EAP-Type/md5
[eap] processing type md5
rlm_eap_md5: Issuing Challenge
++[eap] returns handled
} # server inner-tunnel
[peap] Got tunneled reply code 11
        Reply-Message = "Hello, queenie"
        EAP-Message = 0x010900160410d87b4d6fa861d209c8cfc9d8e1257d79
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xcec54cd4cfcc481d16e979e447d690e2
[peap] Got tunneled reply RADIUS code 11
        Reply-Message = "Hello, queenie"
        EAP-Message = 0x010900160410d87b4d6fa861d209c8cfc9d8e1257d79
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xcec54cd4cfcc481d16e979e447d690e2
[peap] Got tunneled Access-Challenge
++[eap] returns handled
Sending Access-Challenge of id 92 to 192.168.5.200 port 1027
        EAP-Message = 0x0109003319001703010028559ffb3165905a5e63690e955867f5424e0218cf07cc290fafecda5058436fb71242c9da6ff4745
9
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xac5ace1dab53d7b0f4f517f022338120
Finished request 7.
Going to the next request
Waking up in 4.7 seconds.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=93, length=260
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x0209005019001703010018116014253f26e21633aa28570780e33fefdda37671549d6d170301002873a9be10fe631908be5f1
1a9230a85964c0275eb1abb3079a27177c7902dbef7f884f2744f7cecf1
        State = 0xac5ace1dab53d7b0f4f517f022338120
        Message-Authenticator = 0x462602a70ac6448e6bdf54a4fc81e05c
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 9 length 80
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established.  Decoding tunneled attributes.
[peap] EAP type md5
[peap] Got tunnled request
        EAP-Message = 0x020900160410ef6cb6c0397ac7d4c05bf94e3f25b91f
server (null) {
  PEAP: Setting User-Name to queenie
Sending tunneled request
        EAP-Message = 0x020900160410ef6cb6c0397ac7d4c05bf94e3f25b91f
        FreeRADIUS-Proxied-To = 127.0.0.1
        User-Name = "queenie"
        State = 0xcec54cd4cfcc481d16e979e447d690e2
server inner-tunnel {
+- entering group authorize {...}
++[chap] returns noop
++[mschap] returns noop
++[unix] returns notfound
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
++[control] returns noop
[eap] EAP packet type response id 9 length 22
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
[files] users: Matched entry queenie at line 91
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] Found existing Auth-Type, not changing it.
++[pap] returns noop
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/md5
[eap] processing type md5
[eap] Freeing handler
++[eap] returns reject
Failed to authenticate the user.
} # server inner-tunnel
[peap] Got tunneled reply code 3
        Reply-Message = "Hello, queenie"
        EAP-Message = 0x04090004
        Message-Authenticator = 0x00000000000000000000000000000000
[peap] Got tunneled reply RADIUS code 3
        Reply-Message = "Hello, queenie"
        EAP-Message = 0x04090004
        Message-Authenticator = 0x00000000000000000000000000000000
[peap] Tunneled authentication was rejected.
[peap] FAILURE
++[eap] returns handled
Sending Access-Challenge of id 93 to 192.168.5.200 port 1027
        EAP-Message = 0x010a002b19001703010020fea50a2191cf7a27416eb4d9e4fa08914e25fdd9d2213b34dace9a4bb5bec25d
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xac5ace1da450d7b0f4f517f022338120
Finished request 8.
Going to the next request
Waking up in 4.7 seconds.
rad_recv: Access-Request packet from host 192.168.5.200 port 1027, id=94, length=252
        User-Name = "queenie"
        NAS-IP-Address = 192.168.5.200
        NAS-Identifier = "test.5gwireless.com"
        NAS-Port = 0
        Called-Station-Id = "00-11-F5-40-8F-7F:wpatest"
        Calling-Station-Id = "00-1B-11-13-8F-48"
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        Connect-Info = "CONNECT 0Mbps 802.11"
        EAP-Message = 0x020a00481900170301001816e84303549deff79af9bb934033a06bcbe2fb3c025cee331703010020af6c6a918c55145adb321
92ca875b4142b300ae1437f138f770aed0fcecbf624
        State = 0xac5ace1da450d7b0f4f517f022338120
        Message-Authenticator = 0xa00bb1337a1af004155f0fc907736b0d
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "queenie", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 10 length 72
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established.  Decoding tunneled attributes.
[peap] Received EAP-TLV response.
[peap]  Had sent TLV failure.  User was rejected earlier in this session.
[eap] Handler failed in EAP/peap
[eap] Failed in EAP select
++[eap] returns invalid
Failed to authenticate the user.
Using Post-Auth-Type Reject
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> queenie
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 9 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 9
Sending Access-Reject of id 94 to 192.168.5.200 port 1027
        EAP-Message = 0x040a0004
        Message-Authenticator = 0x00000000000000000000000000000000
Waking up in 3.7 seconds.
Cleaning up request 0 ID 85 with timestamp +7
Cleaning up request 1 ID 86 with timestamp +7
Cleaning up request 2 ID 87 with timestamp +7
Cleaning up request 3 ID 88 with timestamp +7
Waking up in 0.1 seconds.
Cleaning up request 4 ID 89 with timestamp +7
Cleaning up request 5 ID 90 with timestamp +7
Cleaning up request 6 ID 91 with timestamp +7
Cleaning up request 7 ID 92 with timestamp +7
Cleaning up request 8 ID 93 with timestamp +7
Waking up in 0.9 seconds.
Cleaning up request 9 ID 94 with timestamp +7
Ready to process requests.