<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'><div dir='ltr'>
Hi everybody.<br><br>I configured Freeradius 2.1.10 Debian 6.0.2 using EAP-TLS authentication. I generated the client and server certificated with XP extention. I created my certificated in the freeradius server, is that ok? or I have to create it in a different machine? I am validating my client (Windows XP) with the server and I get this error:<br><br>I wouls appreciate any help. I would Like to know if this is a certificated error or a configuration error on my freeradius server.<br><br> [peap] TLS_accept: Need to read more data: SSLv3 read client certificate A<br>In SSL Handshake Phase <br>In SSL Accept mode <br>[peap] eaptls_process returned 13 <br>[peap] EAPTLS_HANDLED<br>++[eap] returns handled<br>Sending Access-Challenge of id 178 to 129.90.74.5 port 1645<br> EAP-Message = 0x0104040019c00000064f16030100310200002d03014edce8c088d0ccb9d81d6bc20a71c020036346ce7536b0670cb3fc0b5ba5a271000004000005ff01000100160301060b0b0006070006040002a5308202a13082020aa003020102020900bc739ec037c017e3300d06092a864886f70d0101050500307b310b30090603550406130256453110300e060355040813074d6972616e646131163014060355040a130d504456534120496e7465766570310c300a060355040b13034149543111300f06035504031408776c616e5f696e743121301f06092a864886f70d0109011612726f6a61736561744070647673612e636f6d301e170d313131313233<br> EAP-Message = 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<br> EAP-Message = 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<br> EAP-Message = 0x30820355308202bea003020102020900bc739ec037c017e2300d06092a864886f70d0101050500307b310b30090603550406130256453110300e060355040813074d6972616e646131163014060355040a130d504456534120496e7465766570310c300a060355040b13034149543111300f06035504031408776c616e5f696e743121301f06092a864886f70d0109011612726f6a61736561744070647673612e636f6d301e170d3131313132333133313431315a170d3134313132323133313431315a307b310b30090603550406130256453110300e060355040813074d6972616e646131163014060355040a130d504456534120496e7465766570<br> EAP-Message = 0x310c300a060355040b130341<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0xf5ff3d38f4fb24f2be48500aba47bfca<br>Finished request 17.<br>Going to the next request<br>Waking up in 2.5 seconds.<br>rad_recv: Access-Request packet from host 129.90.74.5 port 1645, id=179, length=164<br> User-Name = "PDVSA2000\\torrealbaw"<br> Framed-MTU = 1400<br> Called-Station-Id = "0011.92ea.0800"<br> Calling-Station-Id = "0021.917e.09cd"<br> Service-Type = Login-User<br> Message-Authenticator = 0x6961ce4663c1662815347ab4a19f4ef7<br> EAP-Message = 0x020400061900<br> NAS-Port-Type = Wireless-802.11<br> NAS-Port = 328<br> State = 0xf5ff3d38f4fb24f2be48500aba47bfca<br> NAS-IP-Address = 129.90.74.5<br> NAS-Identifier = "mw-ltqN3-P2-01"<br># Executing section authorize from file /etc/freeradius/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] No '@' in User-Name = "PDVSA2000\torrealbaw", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 4 length 6<br>[eap] Continuing tunnel setup.<br>++[eap] returns ok<br>Found Auth-Type = EAP<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/peap<br>[eap] processing type peap<br>[peap] processing EAP-TLS<br>[peap] Received TLS ACK<br>[peap] ACK handshake fragment handler<br>[peap] eaptls_verify returned 1 <br>[peap] eaptls_process returned 13 <br>[peap] EAPTLS_HANDLED<br>++[eap] returns handled<br>Sending Access-Challenge of id 179 to 129.90.74.5 port 1645<br> EAP-Message = 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<br> EAP-Message = 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<br> EAP-Message = 0xb1ace50450524b075ccde9a63234dee08ae560998a9159684105568ffd36e66b6a2b6e4ae1ad4b7191b11495e7c657d2601a45d04defe8dc4b2913cf85fbbfb11790813b4fd397d1d7f0f5121667d93b4e12330be8aa5eb21baf3fe916030100040e000000<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0xf5ff3d38f7fa24f2be48500aba47bfca<br>Finished request 18.<br>Going to the next request<br>Waking up in 2.5 seconds.<br>rad_recv: Access-Request packet from host 129.90.74.5 port 1645, id=180, length=350<br> User-Name = "PDVSA2000\\torrealbaw"<br> Framed-MTU = 1400<br> Called-Station-Id = "0011.92ea.0800"<br> Calling-Station-Id = "0021.917e.09cd"<br> Service-Type = Login-User<br> Message-Authenticator = 0xa16fdc424a7242ab200470b821b7476e<br> EAP-Message = 0x020500c01980000000b616030100861000008200801354fd168eae6c17535aef0405eaede8c0270fda99fbe3c054ab15fa2ae2abe31355fda5ae266700013dabdb7738332cff744b0daf7c986768ad39c551bea3f312b0d5d785b353cc77be7e2fede6a28132e6eea5cd2e899fdbf5cd6d65750ca901281ae12f0cc06ac4ec694b6fb904658930590fcb630c3ebf0accf476de6cda140301000101160301002093703a4ef0471ca1d53735e3d250707294600642eccd98beaa6ad304dd34d8cd<br> NAS-Port-Type = Wireless-802.11<br> NAS-Port = 328<br> State = 0xf5ff3d38f7fa24f2be48500aba47bfca<br> NAS-IP-Address = 129.90.74.5<br> NAS-Identifier = "mw-ltqN3-P2-01"<br># Executing section authorize from file /etc/freeradius/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] No '@' in User-Name = "PDVSA2000\torrealbaw", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 5 length 192<br>[eap] Continuing tunnel setup.<br>++[eap] returns ok<br>Found Auth-Type = EAP<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/peap<br>[eap] processing type peap<br>[peap] processing EAP-TLS<br> TLS Length 182<br>[peap] Length Included<br>[peap] eaptls_verify returned 11 <br>[peap] <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange <br>[peap] TLS_accept: SSLv3 read client key exchange A<br>[peap] <<< TLS 1.0 ChangeCipherSpec [length 0001] <br>[peap] <<< TLS 1.0 Handshake [length 0010], Finished <br>[peap] TLS_accept: SSLv3 read finished A<br>[peap] >>> TLS 1.0 ChangeCipherSpec [length 0001] <br>[peap] TLS_accept: SSLv3 write change cipher spec A<br>[peap] >>> TLS 1.0 Handshake [length 0010], Finished <br>[peap] TLS_accept: SSLv3 write finished A<br>[peap] TLS_accept: SSLv3 flush data<br>[peap] (other): SSL negotiation finished successfully<br>SSL Connection Established <br>[peap] eaptls_process returned 13 <br>[peap] EAPTLS_HANDLED<br>++[eap] returns handled<br>Sending Access-Challenge of id 180 to 129.90.74.5 port 1645<br> EAP-Message = 0x01060031190014030100010116030100202d99cf1841e5790ddc41b5d2b11eebc8019c6078d9477ec6a5b6c795314bda0a<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0xf5ff3d38f6f924f2be48500aba47bfca<br>Finished request 19.<br>Going to the next request<br>Waking up in 2.5 seconds.<br>rad_recv: Access-Request packet from host 129.90.74.5 port 1645, id=181, length=164<br> User-Name = "PDVSA2000\\torrealbaw"<br> Framed-MTU = 1400<br> Called-Station-Id = "0011.92ea.0800"<br> Calling-Station-Id = "0021.917e.09cd"<br> Service-Type = Login-User<br> Message-Authenticator = 0xc66bc9b5d4b5aa02019be9aec7e67717<br> EAP-Message = 0x020600061900<br> NAS-Port-Type = Wireless-802.11<br> NAS-Port = 328<br> State = 0xf5ff3d38f6f924f2be48500aba47bfca<br> NAS-IP-Address = 129.90.74.5<br> NAS-Identifier = "mw-ltqN3-P2-01"<br># Executing section authorize from file /etc/freeradius/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] No '@' in User-Name = "PDVSA2000\torrealbaw", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 6 length 6<br>[eap] Continuing tunnel setup.<br>++[eap] returns ok<br>Found Auth-Type = EAP<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/peap<br>[eap] processing type peap<br>[peap] processing EAP-TLS<br>[peap] Received TLS ACK<br>[peap] ACK handshake is finished<br>[peap] eaptls_verify returned 3 <br>[peap] eaptls_process returned 3 <br>[peap] EAPTLS_SUCCESS<br>[peap] Session established. Decoding tunneled attributes.<br>[peap] Peap state TUNNEL ESTABLISHED<br>++[eap] returns handled<br>Sending Access-Challenge of id 181 to 129.90.74.5 port 1645<br> EAP-Message = 0x0107002019001703010015b4ec899280304c6c98d1a0eff579c7a06111a5afbf<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0xf5ff3d38f1f824f2be48500aba47bfca<br>Finished request 20.<br>Going to the next request<br>Waking up in 2.5 seconds.<br>rad_recv: Access-Request packet from host 129.90.74.5 port 1645, id=182, length=206<br> User-Name = "PDVSA2000\\torrealbaw"<br> Framed-MTU = 1400<br> Called-Station-Id = "0011.92ea.0800"<br> Calling-Station-Id = "0021.917e.09cd"<br> Service-Type = Login-User<br> Message-Authenticator = 0x2ee84f5f3c0aa0e7f2e8538c0e6a2397<br> EAP-Message = 0x02070030190017030100254b4deffcadf497a67950eb4e157d13e2b25edf5dd1f1a6a1e6f379db34ffddcc48f38b1b41<br> NAS-Port-Type = Wireless-802.11<br> NAS-Port = 328<br> State = 0xf5ff3d38f1f824f2be48500aba47bfca<br> NAS-IP-Address = 129.90.74.5<br> NAS-Identifier = "mw-ltqN3-P2-01"<br># Executing section authorize from file /etc/freeradius/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] No '@' in User-Name = "PDVSA2000\torrealbaw", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 7 length 48<br>[eap] Continuing tunnel setup.<br>++[eap] returns ok<br>Found Auth-Type = EAP<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/peap<br>[eap] processing type peap<br>[peap] processing EAP-TLS<br>[peap] eaptls_verify returned 7 <br>[peap] Done initial handshake<br>[peap] eaptls_process returned 7 <br>[peap] EAPTLS_OK<br>[peap] Session established. Decoding tunneled attributes.<br>[peap] Peap state WAITING FOR INNER IDENTITY<br>[peap] Identity - PDVSA2000\torrealbaw<br>[peap] Got inner identity 'PDVSA2000\torrealbaw'<br>[peap] Setting default EAP type for tunneled EAP session.<br>[peap] Got tunneled request<br> EAP-Message = 0x02070019015044565341323030305c746f727265616c626177<br>server {<br> PEAP: Setting User-Name to PDVSA2000\torrealbaw<br>Sending tunneled request<br> EAP-Message = 0x02070019015044565341323030305c746f727265616c626177<br> FreeRADIUS-Proxied-To = 127.0.0.1<br> User-Name = "PDVSA2000\\torrealbaw"<br>server {<br># Executing section authorize from file /etc/freeradius/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] No '@' in User-Name = "PDVSA2000\torrealbaw", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 7 length 25<br>[eap] No EAP Start, assuming it's an on-going EAP conversation<br>++[eap] returns updated<br>++[unix] returns notfound<br>++[files] returns noop<br>++[expiration] returns noop<br>++[logintime] returns noop<br>Found Auth-Type = EAP<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] EAP Identity<br>[eap] processing type mschapv2<br>rlm_eap_mschapv2: Issuing Challenge<br>++[eap] returns handled<br>} # server <br>[peap] Got tunneled reply code 11<br> EAP-Message = 0x0108002e1a010800291033a99cca26de284e2f707fca6207f88e5044565341323030305c746f727265616c626177<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0x5b8b0c935b8316a7d8b8f7472f83734d<br>[peap] Got tunneled reply RADIUS code 11<br> EAP-Message = 0x0108002e1a010800291033a99cca26de284e2f707fca6207f88e5044565341323030305c746f727265616c626177<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0x5b8b0c935b8316a7d8b8f7472f83734d<br>[peap] Got tunneled Access-Challenge<br>++[eap] returns handled<br>Sending Access-Challenge of id 182 to 129.90.74.5 port 1645<br> EAP-Message = 0x010800451900170301003a53b624edefcc3ab83d0520863335513f0a4b687e9a3921959c97903113f128c9587cbab243fbc869f35e5f1d4dbffb64e178305b48479a6d9ee3<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0xf5ff3d38f0f724f2be48500aba47bfca<br>Finished request 21.<br>Going to the next request<br>Waking up in 2.5 seconds.<br>rad_recv: Access-Request packet from host 129.90.74.5 port 1645, id=183, length=260<br> User-Name = "PDVSA2000\\torrealbaw"<br> Framed-MTU = 1400<br> Called-Station-Id = "0011.92ea.0800"<br> Calling-Station-Id = "0021.917e.09cd"<br> Service-Type = Login-User<br> Message-Authenticator = 0x54849a37c4bdd01a53574b47343e53f3<br> EAP-Message = 0x020800661900170301005bd55286a276bdab4e76b01de3528ea9c730d7f020bd4c90573ceeb0948b716b5c6b447c5ef357f31659370f5642eea5895ff705ca862b10f76592d726dae601d74bf961d3e88b5bdb81f7a1e61e278e1fb04f3e99e534144f6a0c54<br> NAS-Port-Type = Wireless-802.11<br> NAS-Port = 328<br> State = 0xf5ff3d38f0f724f2be48500aba47bfca<br> NAS-IP-Address = 129.90.74.5<br> NAS-Identifier = "mw-ltqN3-P2-01"<br># Executing section authorize from file /etc/freeradius/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] No '@' in User-Name = "PDVSA2000\torrealbaw", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 8 length 102<br>[eap] Continuing tunnel setup.<br>++[eap] returns ok<br>Found Auth-Type = EAP<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/peap<br>[eap] processing type peap<br>[peap] processing EAP-TLS<br>[peap] eaptls_verify returned 7 <br>[peap] Done initial handshake<br>[peap] eaptls_process returned 7 <br>[peap] EAPTLS_OK<br>[peap] Session established. Decoding tunneled attributes.<br>[peap] Peap state phase2<br>[peap] EAP type mschapv2<br>[peap] Got tunneled request<br> EAP-Message = 0x0208004f1a0208004a311d347d42dd3e21f2d62908c180f3565e0000000000000000b78aba916b4af3d36f8c4060ad010c9f6235512578d8561c005044565341323030305c544f525245414c424157<br>server {<br> PEAP: Setting User-Name to PDVSA2000\torrealbaw<br>Sending tunneled request<br> EAP-Message = 0x0208004f1a0208004a311d347d42dd3e21f2d62908c180f3565e0000000000000000b78aba916b4af3d36f8c4060ad010c9f6235512578d8561c005044565341323030305c544f525245414c424157<br> FreeRADIUS-Proxied-To = 127.0.0.1<br> User-Name = "PDVSA2000\\torrealbaw"<br> State = 0x5b8b0c935b8316a7d8b8f7472f83734d<br>server {<br># Executing section authorize from file /etc/freeradius/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] No '@' in User-Name = "PDVSA2000\torrealbaw", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 8 length 79<br>[eap] No EAP Start, assuming it's an on-going EAP conversation<br>++[eap] returns updated<br>++[unix] returns notfound<br>++[files] returns noop<br>++[expiration] returns noop<br>++[logintime] returns noop<br>Found Auth-Type = EAP<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/mschapv2<br>[eap] processing type mschapv2<br>[mschapv2] # Executing group from file /etc/freeradius/sites-enabled/default<br>[mschapv2] +- entering group MS-CHAP {...}<br>[mschap] No Cleartext-Password configured. Cannot create LM-Password.<br>[mschap] No Cleartext-Password configured. Cannot create NT-Password.<br>[mschap] NT Domain delimeter found, should we have enabled with_ntdomain_hack?<br>[mschap] Creating challenge hash with username: PDVSA2000\TORREALBAW<br>[mschap] Told to do MS-CHAPv2 for PDVSA2000\TORREALBAW with NT-Password<br>[mschap] FAILED: No NT/LM-Password. Cannot perform authentication.<br>[mschap] FAILED: MS-CHAP2-Response is incorrect<br>++[mschap] returns reject<br>[eap] Freeing handler<br>++[eap] returns reject<br>Failed to authenticate the user.<br>} # server <br>[peap] Got tunneled reply code 3<br> MS-CHAP-Error = "\010E=691 R=1"<br> EAP-Message = 0x04080004<br> Message-Authenticator = 0x00000000000000000000000000000000<br>[peap] Got tunneled reply RADIUS code 3<br> MS-CHAP-Error = "\010E=691 R=1"<br> EAP-Message = 0x04080004<br> Message-Authenticator = 0x00000000000000000000000000000000<br>[peap] Tunneled authentication was rejected.<br>[peap] FAILURE<br>++[eap] returns handled<br>Sending Access-Challenge of id 183 to 129.90.74.5 port 1645<br> EAP-Message = 0x010900261900170301001bf6a08f362b2e19ea1fbd80f7a74591373ec656f25acdd7a7444067<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0xf5ff3d38f3f624f2be48500aba47bfca<br>Finished request 22.<br>Going to the next request<br>Waking up in 2.5 seconds.<br>rad_recv: Access-Request packet from host 129.90.74.5 port 1645, id=184, length=196<br> User-Name = "PDVSA2000\\torrealbaw"<br> Framed-MTU = 1400<br> Called-Station-Id = "0011.92ea.0800"<br> Calling-Station-Id = "0021.917e.09cd"<br> Service-Type = Login-User<br> Message-Authenticator = 0x6d7848656b1e370d85b7f553ad464a8d<br> EAP-Message = 0x020900261900170301001b084f894a7a58d3f2c7ae39b6ba6e414552ceabd25995e62fba3e4a<br> NAS-Port-Type = Wireless-802.11<br> NAS-Port = 328<br> State = 0xf5ff3d38f3f624f2be48500aba47bfca<br> NAS-IP-Address = 129.90.74.5<br> NAS-Identifier = "mw-ltqN3-P2-01"<br># Executing section authorize from file /etc/freeradius/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] No '@' in User-Name = "PDVSA2000\torrealbaw", looking up realm NULL<br>[suffix] No such realm "NULL"<br>++[suffix] returns noop<br>[eap] EAP packet type response id 9 length 38<br>[eap] Continuing tunnel setup.<br>++[eap] returns ok<br>Found Auth-Type = EAP<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group authenticate {...}<br>[eap] Request found, released from the list<br>[eap] EAP/peap<br>[eap] processing type peap<br>[peap] processing EAP-TLS<br>[peap] eaptls_verify returned 7 <br>[peap] Done initial handshake<br>[peap] eaptls_process returned 7 <br>[peap] EAPTLS_OK<br>[peap] Session established. Decoding tunneled attributes.<br>[peap] Peap state send tlv failure<br>[peap] Received EAP-TLV response.<br>[peap] The users session was previously rejected: returning reject (again.)<br>[peap] *** This means you need to read the PREVIOUS messages in the debug output<br>[peap] *** to find out the reason why the user was rejected.<br>[peap] *** Look for "reject" or "fail". Those earlier messages will tell you.<br>[peap] *** what went wrong, and how to fix the problem.<br>[eap] Handler failed in EAP/peap<br>[eap] Failed in EAP select<br>++[eap] returns invalid<br>Failed to authenticate the user.<br>Using Post-Auth-Type Reject<br># Executing group from file /etc/freeradius/sites-enabled/default<br>+- entering group REJECT {...}<br>[attr_filter.access_reject] expand: %{User-Name} -> PDVSA2000\torrealbaw<br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>Delaying reject of request 23 for 1 seconds<br>Going to the next request<br>Waking up in 0.9 seconds.<br>Sending delayed reject for request 23<br>Sending Access-Reject of id 184 to 129.90.74.5 port 1645<br> EAP-Message = 0x04090004<br> Message-Authenticator = 0x00000000000000000000000000000000<br>Waking up in 1.5 seconds.<br>Cleaning up request 0 ID 161 with timestamp +11<br>Cleaning up request 1 ID 162 with timestamp +11<br>Cleaning up request 2 ID 163 with timestamp +11<br>Waking up in 0.1 seconds.<br>Cleaning up request 3 ID 164 with timestamp +11<br>Waking up in 0.1 seconds.<br>Cleaning up request 4 ID 165 with timestamp +11<br>Cleaning up request 5 ID 166 with timestamp +11<br>Cleaning up request 6 ID 167 with timestamp +11<br>Waking up in 1.0 seconds.<br>Cleaning up request 7 ID 168 with timestamp +11<br>Cleaning up request 8 ID 169 with timestamp +12<br>Cleaning up request 9 ID 170 with timestamp +12<br>Cleaning up request 10 ID 171 with timestamp +12<br>Cleaning up request 11 ID 172 with timestamp +12<br>Cleaning up request 12 ID 173 with timestamp +12<br>Cleaning up request 13 ID 174 with timestamp +12<br>Cleaning up request 14 ID 175 with timestamp +12<br>Waking up in 1.0 seconds.<br>Cleaning up request 15 ID 176 with timestamp +12<br>Cleaning up request 16 ID 177 with timestamp +13<br>Cleaning up request 17 ID 178 with timestamp +13<br>Cleaning up request 18 ID 179 with timestamp +13<br>Cleaning up request 19 ID 180 with timestamp +13<br>Cleaning up request 20 ID 181 with timestamp +13<br>Cleaning up request 21 ID 182 with timestamp +13<br>Cleaning up request 22 ID 183 with timestamp +13<br>Waking up in 1.0 seconds.<br>Cleaning up request 23 ID 184 with timestamp +13<br>Ready to process requests.<br><br><br> </div></body>
</html>