<br>hi,<br><br>am using Freeradius 2.1.10 along with wpa_supplicant 0.7.3
and hostapd 0.7.3 on ubuntu lucid 10.04 machines with openssl 1.0.0a in
wpa_supplicant and 0.9.8k in freeradius server. i enabled session
resumption in the free radius and it works fine for EAP methods -PEAP
and TTLS when i hand over connection to previously connected Acess point and it is different when i configured for TLS, it seems in the cache
it didnt get any values to store and is my debug report,<br><br><br>Sun Jul 31 12:47:52 2011 : Info: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default<br>Sun Jul 31 12:47:52 2011 : Info: +- entering group authorize {...}<br>
Sun Jul 31 12:47:52 2011 : Info: ++[preprocess] returns ok<br>Sun Jul 31 12:47:52 2011 : Info: ++[chap] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: ++[mschap] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: ++[digest] returns noop<br>
Sun Jul 31 12:47:52 2011 : Info: [suffix] No '@' in User-Name = "anonymous", looking up realm NULL<br>Sun Jul 31 12:47:52 2011 : Info: [suffix] No such realm "NULL"<br>Sun Jul 31 12:47:52 2011 : Info: ++[suffix] returns noop<br>
Sun Jul 31 12:47:52 2011 : Info: [eap] EAP packet type response id 248 length 253<br>Sun Jul 31 12:47:52 2011 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation<br>Sun Jul 31 12:47:52 2011 : Info: ++[eap] returns updated<br>
Sun Jul 31 12:47:52 2011 : Info: ++[files] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: ++[expiration] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: ++[logintime] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: ++[pap] returns noop<br>
Sun Jul 31 12:47:52 2011 : Info: Found Auth-Type = EAP<br>Sun Jul 31 12:47:52 2011 : Info: # Executing group from file /usr/local/etc/raddb/sites-enabled/default<br>Sun Jul 31 12:47:52 2011 : Info: +- entering group authenticate {...}<br>
Sun Jul 31 12:47:52 2011 : Info: [eap] Request found, released from the list<br>Sun Jul 31 12:47:52 2011 : Info: [eap] EAP/tls<br>Sun Jul 31 12:47:52 2011 : Info: [eap] processing type tls<br>Sun Jul 31 12:47:52 2011 : Info: [tls] Authenticate<br>
Sun Jul 31 12:47:52 2011 : Info: [tls] processing EAP-TLS<br>Sun Jul 31 12:47:52 2011 : Info: [tls] eaptls_verify returned 7 <br>Sun Jul 31 12:47:52 2011 : Info: [tls] Done initial handshake<br>Sun Jul 31 12:47:52 2011 : Info: [tls] <<< TLS 1.0 Handshake [length 0823], Certificate <br>
Sun Jul 31 12:47:52 2011 : Info: [tls] chain-depth=1, <br>Sun Jul 31 12:47:52 2011 : Info: [tls] error=0<br>Sun Jul 31 12:47:52 2011 : Info: [tls] --> User-Name = anonymous<br>Sun Jul 31 12:47:52 2011 : Info: [tls] --> BUF-Name = CA_dhinu<br>
Sun Jul 31 12:47:52 2011 : Info: [tls] --> subject = /C=UK/ST=Lancashire/O=Computing Department/OU=testbed/CN=CA_dhinu/emailAddress=<a href="mailto:d.gunasekaran@comp.lancs.ac.uk">d.gunasekaran@comp.lancs.ac.uk</a><br>
Sun Jul 31 12:47:52 2011 : Info: [tls] --> issuer = /C=UK/ST=Lancashire/O=Computing Department/OU=testbed/CN=CA_dhinu/emailAddress=<a href="mailto:d.gunasekaran@comp.lancs.ac.uk">d.gunasekaran@comp.lancs.ac.uk</a><br>
Sun Jul 31 12:47:52 2011 : Info: [tls] --> verify return:1<br>Sun Jul 31 12:47:52 2011 : Info: [tls] chain-depth=0, <br>Sun Jul 31 12:47:52 2011 : Info: [tls] error=0<br>Sun Jul 31 12:47:52 2011 : Info: [tls] --> User-Name = anonymous<br>
Sun Jul 31 12:47:52 2011 : Info: [tls] --> BUF-Name = CA_dhinu<br>Sun Jul 31 12:47:52 2011 : Info: [tls] --> subject = /C=UK/ST=Lancashire/O=Computing Department/OU=testbed/CN=CA_dhinu/emailAddress=<a href="mailto:dhinu@lancs.ac.uk">dhinu@lancs.ac.uk</a><br>
Sun Jul 31 12:47:52 2011 : Info: [tls] --> issuer = /C=UK/ST=Lancashire/O=Computing Department/OU=testbed/CN=CA_dhinu/emailAddress=<a href="mailto:d.gunasekaran@comp.lancs.ac.uk">d.gunasekaran@comp.lancs.ac.uk</a><br>
Sun Jul 31 12:47:52 2011 : Info: [tls] --> verify return:1<br>Sun Jul 31 12:47:52 2011 : Info: [tls] TLS_accept: SSLv3 read client certificate A<br>Sun Jul 31 12:47:52 2011 : Info: [tls] <<< TLS 1.0 Handshake [length 0046], ClientKeyExchange <br>
Sun Jul 31 12:47:52 2011 : Info: [tls] TLS_accept: SSLv3 read client key exchange A<br>Sun Jul 31 12:47:52 2011 : Info: [tls] <<< TLS 1.0 Handshake [length 0106], CertificateVerify <br>Sun Jul 31 12:47:52 2011 : Info: [tls] TLS_accept: SSLv3 read certificate verify A<br>
Sun Jul 31 12:47:52 2011 : Info: [tls] <<< TLS 1.0 ChangeCipherSpec [length 0001] <br>Sun Jul 31 12:47:52 2011 : Info: [tls] <<< TLS 1.0 Handshake [length 0010], Finished <br>Sun Jul 31 12:47:52 2011 : Info: [tls] TLS_accept: SSLv3 read finished A<br>
Sun Jul 31 12:47:52 2011 : Info: [tls] >>> TLS 1.0 ChangeCipherSpec [length 0001] <br>Sun Jul 31 12:47:52 2011 : Info: [tls] TLS_accept: SSLv3 write change cipher spec A<br>Sun Jul 31 12:47:52 2011 : Info: [tls] >>> TLS 1.0 Handshake [length 0010], Finished <br>
Sun Jul 31 12:47:52 2011 : Info: [tls] TLS_accept: SSLv3 write finished A<br>Sun Jul 31 12:47:52 2011 : Info: [tls] TLS_accept: SSLv3 flush data<br>Sun Jul 31 12:47:52 2011 : Debug: SSL: adding session db2e0d09e995781ea6a8be00a185c82394939331d916a7e112ed20b332b00582 to cache<br>
Sun Jul 31 12:47:52 2011 : Info: [tls] (other): SSL negotiation finished successfully<br>Sun Jul 31 12:47:52 2011 : Debug: SSL Connection Established <br>Sun Jul 31 12:47:52 2011 : Info: [tls] eaptls_process returned 13 <br>
Sun Jul 31 12:47:52 2011 : Info: ++[eap] returns handled<br>Sending Access-Challenge of id 17 to 2001:630:80:7439:20d:56ff:fec2:4098 port 42910<br> EAP-Message = 0x01f900450d800000003b1403010001011603010030de67c5937849b358ca0f69a0212cb9022fea5d0ed10e553e7fa9eb8824fc84e2cf2984baf71f2006be03d94ba21c2a49<br>
Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0x6e6d535068945e0c4436bf334612c0a4<br>Sun Jul 31 12:47:52 2011 : Info: Finished request 16.<br>Sun Jul 31 12:47:52 2011 : Debug: Going to the next request<br>
Sun Jul 31 12:47:52 2011 : Debug: Waking up in 4.6 seconds.<br>rad_recv: Access-Request packet from host 2001:630:80:7439:20d:56ff:fec2:4098 port 42910, id=18, length=173<br> User-Name = "anonymous"<br> NAS-IP-Address = 127.0.0.1<br>
NAS-Port = 1<br> Called-Station-Id = "74-EA-3A-B3-FA-D9:dhinu_forgn"<br> Calling-Station-Id = "00-19-7D-1C-E5-DE"<br> Framed-MTU = 1400<br> NAS-Port-Type = Wireless-802.11<br> Connect-Info = "CONNECT 11Mbps 802.11b"<br>
EAP-Message = 0x02f900060d00<br> State = 0x6e6d535068945e0c4436bf334612c0a4<br> Message-Authenticator = 0x13f0a649759ecbfce547ce07cce913e5<br>Sun Jul 31 12:47:52 2011 : Info: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default<br>
Sun Jul 31 12:47:52 2011 : Info: +- entering group authorize {...}<br>Sun Jul 31 12:47:52 2011 : Info: ++[preprocess] returns ok<br>Sun Jul 31 12:47:52 2011 : Info: ++[chap] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: ++[mschap] returns noop<br>
Sun Jul 31 12:47:52 2011 : Info: ++[digest] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: [suffix] No '@' in User-Name = "anonymous", looking up realm NULL<br>Sun Jul 31 12:47:52 2011 : Info: [suffix] No such realm "NULL"<br>
Sun Jul 31 12:47:52 2011 : Info: ++[suffix] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: [eap] EAP packet type response id 249 length 6<br>Sun Jul 31 12:47:52 2011 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation<br>
Sun Jul 31 12:47:52 2011 : Info: ++[eap] returns updated<br>Sun Jul 31 12:47:52 2011 : Info: ++[files] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: ++[expiration] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: ++[logintime] returns noop<br>
Sun Jul 31 12:47:52 2011 : Info: ++[pap] returns noop<br>Sun Jul 31 12:47:52 2011 : Info: Found Auth-Type = EAP<br>Sun Jul 31 12:47:52 2011 : Info: # Executing group from file /usr/local/etc/raddb/sites-enabled/default<br>
Sun Jul 31 12:47:52 2011 : Info: +- entering group authenticate {...}<br>Sun Jul 31 12:47:52 2011 : Info: [eap] Request found, released from the list<br>Sun Jul 31 12:47:52 2011 : Info: [eap] EAP/tls<br>Sun Jul 31 12:47:52 2011 : Info: [eap] processing type tls<br>
Sun Jul 31 12:47:52 2011 : Info: [tls] Authenticate<br>Sun Jul 31 12:47:52 2011 : Info: [tls] processing EAP-TLS<br>Sun Jul 31 12:47:52 2011 : Info: [tls] Received TLS ACK<br>Sun Jul 31 12:47:52 2011 : Info: [tls] ACK handshake is finished<br>
Sun Jul 31 12:47:52 2011 : Info: [tls] eaptls_verify returned 3 <br>Sun Jul 31 12:47:52 2011 : Info: [tls] eaptls_process returned 3 <br>Sun Jul 31 12:47:52 2011 : Info: [tls] Adding user data to cached session<br>Sun Jul 31 12:47:52 2011 : Info: [tls] Saving response in the cache<br>
Sun Jul 31 12:47:52 2011 : Info: [tls] WARNING: No information to cache: session caching will be disabled for this session.<br>Sun Jul 31 12:47:52 2011 : Debug: SSL: Removing session db2e0d09e995781ea6a8be00a185c82394939331d916a7e112ed20b332b00582 from the cache<br>
Sun Jul 31 12:47:52 2011 : Info: [eap] Freeing handler<br>Sun Jul 31 12:47:52 2011 : Info: ++[eap] returns ok<br>Sun Jul 31 12:47:52 2011 : Info: # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default<br>
Sun Jul 31 12:47:52 2011 : Info: +- entering group post-auth {...}<br>Sun Jul 31 12:47:52 2011 : Info: ++[exec] returns noop<br>Sending Access-Accept of id 18 to 2001:630:80:7439:20d:56ff:fec2:4098 port 42910<br> MS-MPPE-Recv-Key = 0x308de706550b0dbf9ba5659899878625e53aaa582d2488d1367917cdaba0aaa6<br>
MS-MPPE-Send-Key = 0xb24de61b11d2bf5e3c1b8d1806522ebbb2361457e389c088f01e8a3d27cb160f<br> EAP-Message = 0x03f90004<br> Message-Authenticator = 0x00000000000000000000000000000000<br> User-Name = "anonymous"<br>
Sun Jul 31 12:47:52 2011 : Info: Finished request 17.<br>Sun Jul 31 12:47:52 2011 : Debug: Going to the next request<br>Sun Jul 31 12:47:52 2011 : Debug: Waking up in 4.6 seconds.<br>rad_recv: Accounting-Request packet from host 2001:630:80:7439:20d:56ff:fec2:4098 port 53849, id=19, length=154<br>
<br><br>in eap.conf, i enabled tls > cache > enable = yes <br><br>lifetime is 10 hrs<br><br>cheers,<br>dhinu.<br>