Wed May 16 12:47:25 2012 : Info: FreeRADIUS Version 2.1.10, for host x86_64-redhat-linux-gnu, built on Oct 19 2010 at 19:44:32
Wed May 16 12:47:25 2012 : Info: Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. 
Wed May 16 12:47:25 2012 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A 
Wed May 16 12:47:25 2012 : Info: PARTICULAR PURPOSE. 
Wed May 16 12:47:25 2012 : Info: You may redistribute copies of FreeRADIUS under the terms of the 
Wed May 16 12:47:25 2012 : Info: GNU General Public License v2. 
Wed May 16 12:47:25 2012 : Info: Starting - reading configuration files ...
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/radiusd.conf
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/proxy.conf
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/clients.conf
Wed May 16 12:47:25 2012 : Debug: including files in directory /etc/raddb/modules/
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/expr
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/smsotp
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/detail.log
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/detail.example.com
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/perl
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/otp
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/expiration
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/sqlcounter_expire_on_login
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/smbpasswd
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/files
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/preprocess
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/attr_rewrite
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/pap
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/policy
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/wimax
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/logintime
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/linelog
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/checkval
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/cui
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/sradutmp
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/etc_group
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/sql_log
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/dynamic_clients
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/echo
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/mschap
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/ldap
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/opendirectory
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/acct_unique
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/realm
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/ippool
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/mac2ip
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/always
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/detail
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/passwd
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/exec
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/pam
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/attr_filter
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/chap
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/inner-eap
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/digest
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/mac2vlan
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/ntlm_auth
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/unix
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/counter
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/radutmp
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/eap.conf
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/policy.conf
Wed May 16 12:47:25 2012 : Debug: including files in directory /etc/raddb/sites-enabled/
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/sites-enabled/metroplus
Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/sites-enabled/domain
Wed May 16 12:47:25 2012 : Debug: main {
Wed May 16 12:47:25 2012 : Debug: 	user = "radiusd"
Wed May 16 12:47:25 2012 : Debug: 	group = "radiusd"
Wed May 16 12:47:25 2012 : Debug: 	allow_core_dumps = no
Wed May 16 12:47:25 2012 : Debug: }
Wed May 16 12:47:25 2012 : Debug: including dictionary file /etc/raddb/dictionary
Wed May 16 12:47:25 2012 : Debug: main {
Wed May 16 12:47:25 2012 : Debug: 	prefix = "/usr"
Wed May 16 12:47:25 2012 : Debug: 	localstatedir = "/var"
Wed May 16 12:47:25 2012 : Debug: 	logdir = "/var/log/radius"
Wed May 16 12:47:25 2012 : Debug: 	libdir = "/usr/lib64/freeradius"
Wed May 16 12:47:25 2012 : Debug: 	radacctdir = "/var/log/radius/radacct"
Wed May 16 12:47:25 2012 : Debug: 	hostname_lookups = no
Wed May 16 12:47:25 2012 : Debug: 	max_request_time = 30
Wed May 16 12:47:25 2012 : Debug: 	cleanup_delay = 5
Wed May 16 12:47:25 2012 : Debug: 	max_requests = 1024
Wed May 16 12:47:25 2012 : Debug: 	pidfile = "/var/run/radiusd/radiusd.pid"
Wed May 16 12:47:25 2012 : Debug: 	checkrad = "/usr/sbin/checkrad"
Wed May 16 12:47:25 2012 : Debug: 	debug_level = 0
Wed May 16 12:47:25 2012 : Debug: 	proxy_requests = yes
Wed May 16 12:47:25 2012 : Debug:  log {
Wed May 16 12:47:25 2012 : Debug: 	stripped_names = no
Wed May 16 12:47:25 2012 : Debug: 	auth = no
Wed May 16 12:47:25 2012 : Debug: 	auth_badpass = no
Wed May 16 12:47:25 2012 : Debug: 	auth_goodpass = no
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug:  security {
Wed May 16 12:47:25 2012 : Debug: 	max_attributes = 200
Wed May 16 12:47:25 2012 : Debug: 	reject_delay = 1
Wed May 16 12:47:25 2012 : Debug: 	status_server = yes
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug: }
Wed May 16 12:47:25 2012 : Debug: radiusd: #### Loading Realms and Home Servers ####
Wed May 16 12:47:25 2012 : Debug:  proxy server {
Wed May 16 12:47:25 2012 : Debug: 	retry_delay = 5
Wed May 16 12:47:25 2012 : Debug: 	retry_count = 3
Wed May 16 12:47:25 2012 : Debug: 	default_fallback = no
Wed May 16 12:47:25 2012 : Debug: 	dead_time = 120
Wed May 16 12:47:25 2012 : Debug: 	wake_all_if_all_dead = no
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug:  realm domain.com {
Wed May 16 12:47:25 2012 : Debug: 	nostrip
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug:  home_server metroplus {
Wed May 16 12:47:25 2012 : Debug: 	ipaddr = 192.168.201.22
Wed May 16 12:47:25 2012 : Debug: 	port = 1812
Wed May 16 12:47:25 2012 : Debug: 	type = "auth"
Wed May 16 12:47:25 2012 : Debug: 	secret = "xxxxxxxxxxxx"
Wed May 16 12:47:25 2012 : Debug: 	response_window = 30
Wed May 16 12:47:25 2012 : Debug: 	max_outstanding = 65536
Wed May 16 12:47:25 2012 : Debug: 	require_message_authenticator = yes
Wed May 16 12:47:25 2012 : Debug: 	zombie_period = 40
Wed May 16 12:47:25 2012 : Debug: 	status_check = "none"
Wed May 16 12:47:25 2012 : Debug: 	ping_interval = 30
Wed May 16 12:47:25 2012 : Debug: 	check_interval = 30
Wed May 16 12:47:25 2012 : Debug: 	num_answers_to_alive = 3
Wed May 16 12:47:25 2012 : Debug: 	num_pings_to_alive = 3
Wed May 16 12:47:25 2012 : Debug: 	revive_interval = 300
Wed May 16 12:47:25 2012 : Debug: 	status_check_timeout = 4
Wed May 16 12:47:25 2012 : Debug: 	irt = 2
Wed May 16 12:47:25 2012 : Debug: 	mrt = 16
Wed May 16 12:47:25 2012 : Debug: 	mrc = 5
Wed May 16 12:47:25 2012 : Debug: 	mrd = 30
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug:  home_server_pool metroplus_pool {
Wed May 16 12:47:25 2012 : Debug: 	type = fail-over
Wed May 16 12:47:25 2012 : Debug: 	virtual_server = metroplus
Wed May 16 12:47:25 2012 : Debug: 	home_server = metroplus
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug:  realm poc.domain2.fqdn {
Wed May 16 12:47:25 2012 : Debug: 	auth_pool = metroplus_pool
Wed May 16 12:47:25 2012 : Debug: 	nostrip
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug:  realm LOCAL {
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug: radiusd: #### Loading Clients ####
Wed May 16 12:47:25 2012 : Debug:  client localhost {
Wed May 16 12:47:25 2012 : Debug: 	ipaddr = 127.0.0.1
Wed May 16 12:47:25 2012 : Debug: 	require_message_authenticator = no
Wed May 16 12:47:25 2012 : Debug: 	secret = "xxxxxxxxxxxxxx"
Wed May 16 12:47:25 2012 : Debug: 	nastype = "other"
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug:  client aruba01 {
Wed May 16 12:47:25 2012 : Debug: 	ipaddr = 172.30.20.47
Wed May 16 12:47:25 2012 : Debug: 	require_message_authenticator = no
Wed May 16 12:47:25 2012 : Debug: 	secret = "xxxxxxxxxxxxxxx"
Wed May 16 12:47:25 2012 : Debug: 	nastype = "other"
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug:  client radius01 {
Wed May 16 12:47:25 2012 : Debug: 	ipaddr = 172.30.20.16
Wed May 16 12:47:25 2012 : Debug: 	require_message_authenticator = no
Wed May 16 12:47:25 2012 : Debug: 	secret = "xxxxxxxxxxxxxxx"
Wed May 16 12:47:25 2012 : Debug: 	nastype = "other"
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug:  client radius02 {
Wed May 16 12:47:25 2012 : Debug: 	ipaddr = 172.30.20.17
Wed May 16 12:47:25 2012 : Debug: 	require_message_authenticator = no
Wed May 16 12:47:25 2012 : Debug: 	secret = "xxxxxxxxxxxxxxx"
Wed May 16 12:47:25 2012 : Debug: 	nastype = "other"
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug: radiusd: #### Instantiating modules ####
Wed May 16 12:47:25 2012 : Debug:  instantiate {
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_exec, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_exec
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "exec" from file /etc/raddb/modules/exec
Wed May 16 12:47:25 2012 : Debug:   exec {
Wed May 16 12:47:25 2012 : Debug: 	wait = no
Wed May 16 12:47:25 2012 : Debug: 	input_pairs = "request"
Wed May 16 12:47:25 2012 : Debug: 	shell_escape = yes
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_expr, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_expr
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "expr" from file /etc/raddb/modules/expr
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_expiration, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_expiration
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "expiration" from file /etc/raddb/modules/expiration
Wed May 16 12:47:25 2012 : Debug:   expiration {
Wed May 16 12:47:25 2012 : Debug: 	reply-message = "Password Has Expired  "
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_logintime, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_logintime
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "logintime" from file /etc/raddb/modules/logintime
Wed May 16 12:47:25 2012 : Debug:   logintime {
Wed May 16 12:47:25 2012 : Debug: 	reply-message = "You are calling outside your allowed timespan  "
Wed May 16 12:47:25 2012 : Debug: 	minimum-timeout = 60
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  }
Wed May 16 12:47:25 2012 : Debug: radiusd: #### Loading Virtual Servers ####
Wed May 16 12:47:25 2012 : Debug: server metroplus { # from file /etc/raddb/sites-enabled/metroplus
Wed May 16 12:47:25 2012 : Debug:  modules {
Wed May 16 12:47:25 2012 : Debug:  Module: Checking authorize {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Checking pre-proxy {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_files, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_files
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "files" from file /etc/raddb/modules/files
Wed May 16 12:47:25 2012 : Debug:   files {
Wed May 16 12:47:25 2012 : Debug: 	usersfile = "/etc/raddb/users"
Wed May 16 12:47:25 2012 : Debug: 	acctusersfile = "/etc/raddb/acct_users"
Wed May 16 12:47:25 2012 : Debug: 	preproxy_usersfile = "/etc/raddb/preproxy_users"
Wed May 16 12:47:25 2012 : Debug: 	compat = "no"
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_attr_filter, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_attr_filter
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "attr_filter.pre-proxy" from file /etc/raddb/modules/attr_filter
Wed May 16 12:47:25 2012 : Debug:   attr_filter attr_filter.pre-proxy {
Wed May 16 12:47:25 2012 : Debug: 	attrsfile = "/etc/raddb/attrs.pre-proxy"
Wed May 16 12:47:25 2012 : Debug: 	key = "%{Realm}"
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_detail, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_detail
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "pre_proxy_log" from file /etc/raddb/modules/detail.log
Wed May 16 12:47:25 2012 : Debug:   detail pre_proxy_log {
Wed May 16 12:47:25 2012 : Debug: 	detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d"
Wed May 16 12:47:25 2012 : Debug: 	header = "%t"
Wed May 16 12:47:25 2012 : Debug: 	detailperm = 384
Wed May 16 12:47:25 2012 : Debug: 	dirperm = 493
Wed May 16 12:47:25 2012 : Debug: 	locking = no
Wed May 16 12:47:25 2012 : Debug: 	log_packet_header = no
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Checking post-proxy {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Loading virtual module set_metroplus_vlan
Wed May 16 12:47:25 2012 : Debug:  } # modules
Wed May 16 12:47:25 2012 : Debug: } # server
Wed May 16 12:47:25 2012 : Debug: server inner-tunnel-domain { # from file /etc/raddb/sites-enabled/domain
Wed May 16 12:47:25 2012 : Debug:  modules {
Wed May 16 12:47:25 2012 : Debug:  Module: Checking authenticate {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_pap, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_pap
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "pap" from file /etc/raddb/modules/pap
Wed May 16 12:47:25 2012 : Debug:   pap {
Wed May 16 12:47:25 2012 : Debug: 	encryption_scheme = "auto"
Wed May 16 12:47:25 2012 : Debug: 	auto_header = no
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_chap, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_chap
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "chap" from file /etc/raddb/modules/chap
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_mschap, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_mschap
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "mschap" from file /etc/raddb/modules/mschap
Wed May 16 12:47:25 2012 : Debug:   mschap {
Wed May 16 12:47:25 2012 : Debug: 	use_mppe = yes
Wed May 16 12:47:25 2012 : Debug: 	require_encryption = no
Wed May 16 12:47:25 2012 : Debug: 	require_strong = no
Wed May 16 12:47:25 2012 : Debug: 	with_ntdomain_hack = no
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_unix, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_unix
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "unix" from file /etc/raddb/modules/unix
Wed May 16 12:47:25 2012 : Debug:   unix {
Wed May 16 12:47:25 2012 : Debug: 	radwtmp = "/var/log/radius/radwtmp"
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_eap, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_eap
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "eap_domain" from file /etc/raddb/eap.conf
Wed May 16 12:47:25 2012 : Debug:   eap eap_domain {
Wed May 16 12:47:25 2012 : Debug: 	default_eap_type = "md5"
Wed May 16 12:47:25 2012 : Debug: 	timer_expire = 60
Wed May 16 12:47:25 2012 : Debug: 	ignore_unknown_eap_types = no
Wed May 16 12:47:25 2012 : Debug: 	cisco_accounting_username_bug = no
Wed May 16 12:47:25 2012 : Debug: 	max_sessions = 4096
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to sub-module rlm_eap_md5
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating eap-md5
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to sub-module rlm_eap_leap
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating eap-leap
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to sub-module rlm_eap_gtc
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating eap-gtc
Wed May 16 12:47:25 2012 : Debug:    gtc {
Wed May 16 12:47:25 2012 : Debug: 	challenge = "Password: "
Wed May 16 12:47:25 2012 : Debug: 	auth_type = "PAP"
Wed May 16 12:47:25 2012 : Debug:    }
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to sub-module rlm_eap_tls
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating eap-tls
Wed May 16 12:47:25 2012 : Debug:    tls {
Wed May 16 12:47:25 2012 : Debug: 	rsa_key_exchange = no
Wed May 16 12:47:25 2012 : Debug: 	dh_key_exchange = yes
Wed May 16 12:47:25 2012 : Debug: 	rsa_key_length = 512
Wed May 16 12:47:25 2012 : Debug: 	dh_key_length = 512
Wed May 16 12:47:25 2012 : Debug: 	verify_depth = 0
Wed May 16 12:47:25 2012 : Debug: 	CA_path = "/etc/raddb/certs"
Wed May 16 12:47:25 2012 : Debug: 	pem_file_type = yes
Wed May 16 12:47:25 2012 : Debug: 	private_key_file = "/etc/raddb/certs/server.pem"
Wed May 16 12:47:25 2012 : Debug: 	certificate_file = "/etc/raddb/certs/server.pem"
Wed May 16 12:47:25 2012 : Debug: 	CA_file = "/etc/raddb/certs/ca.pem"
Wed May 16 12:47:25 2012 : Debug: 	private_key_password = "whatever"
Wed May 16 12:47:25 2012 : Debug: 	dh_file = "/etc/raddb/certs/dh"
Wed May 16 12:47:25 2012 : Debug: 	random_file = "/etc/raddb/certs/random"
Wed May 16 12:47:25 2012 : Debug: 	fragment_size = 1024
Wed May 16 12:47:25 2012 : Debug: 	include_length = yes
Wed May 16 12:47:25 2012 : Debug: 	check_crl = no
Wed May 16 12:47:25 2012 : Debug: 	cipher_list = "DEFAULT"
Wed May 16 12:47:25 2012 : Debug:     cache {
Wed May 16 12:47:25 2012 : Debug: 	enable = no
Wed May 16 12:47:25 2012 : Debug: 	lifetime = 24
Wed May 16 12:47:25 2012 : Debug: 	max_entries = 255
Wed May 16 12:47:25 2012 : Debug:     }
Wed May 16 12:47:25 2012 : Debug:     verify {
Wed May 16 12:47:25 2012 : Debug:     }
Wed May 16 12:47:25 2012 : Debug:    }
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to sub-module rlm_eap_ttls
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating eap-ttls
Wed May 16 12:47:25 2012 : Debug:    ttls {
Wed May 16 12:47:25 2012 : Debug: 	default_eap_type = "md5"
Wed May 16 12:47:25 2012 : Debug: 	copy_request_to_tunnel = no
Wed May 16 12:47:25 2012 : Debug: 	use_tunneled_reply = no
Wed May 16 12:47:25 2012 : Debug: 	virtual_server = "inner-tunnel-domain"
Wed May 16 12:47:25 2012 : Debug: 	include_length = yes
Wed May 16 12:47:25 2012 : Debug:    }
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to sub-module rlm_eap_peap
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating eap-peap
Wed May 16 12:47:25 2012 : Debug:    peap {
Wed May 16 12:47:25 2012 : Debug: 	default_eap_type = "mschapv2"
Wed May 16 12:47:25 2012 : Debug: 	copy_request_to_tunnel = no
Wed May 16 12:47:25 2012 : Debug: 	use_tunneled_reply = no
Wed May 16 12:47:25 2012 : Debug: 	proxy_tunneled_request_as_eap = yes
Wed May 16 12:47:25 2012 : Debug: 	virtual_server = "inner-tunnel-domain"
Wed May 16 12:47:25 2012 : Debug:    }
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to sub-module rlm_eap_mschapv2
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating eap-mschapv2
Wed May 16 12:47:25 2012 : Debug:    mschapv2 {
Wed May 16 12:47:25 2012 : Debug: 	with_ntdomain_hack = no
Wed May 16 12:47:25 2012 : Debug:    }
Wed May 16 12:47:25 2012 : Debug:  Module: Checking authorize {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_realm, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_realm
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "suffix" from file /etc/raddb/modules/realm
Wed May 16 12:47:25 2012 : Debug:   realm suffix {
Wed May 16 12:47:25 2012 : Debug: 	format = "suffix"
Wed May 16 12:47:25 2012 : Debug: 	delimiter = "@"
Wed May 16 12:47:25 2012 : Debug: 	ignore_default = no
Wed May 16 12:47:25 2012 : Debug: 	ignore_null = no
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_ldap, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_ldap
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "ldap_domain" from file /etc/raddb/modules/ldap
Wed May 16 12:47:25 2012 : Debug:   ldap ldap_domain {
Wed May 16 12:47:25 2012 : Debug: 	server = "ldap.svc.be.nl"
Wed May 16 12:47:25 2012 : Debug: 	port = 389
Wed May 16 12:47:25 2012 : Debug: 	password = ""
Wed May 16 12:47:25 2012 : Debug: 	identity = ""
Wed May 16 12:47:25 2012 : Debug: 	net_timeout = 1
Wed May 16 12:47:25 2012 : Debug: 	timeout = 4
Wed May 16 12:47:25 2012 : Debug: 	timelimit = 3
Wed May 16 12:47:25 2012 : Debug: 	tls_mode = no
Wed May 16 12:47:25 2012 : Debug: 	start_tls = no
Wed May 16 12:47:25 2012 : Debug: 	tls_require_cert = "allow"
Wed May 16 12:47:25 2012 : Debug:    tls {
Wed May 16 12:47:25 2012 : Debug: 	start_tls = no
Wed May 16 12:47:25 2012 : Debug: 	require_cert = "allow"
Wed May 16 12:47:25 2012 : Debug:    }
Wed May 16 12:47:25 2012 : Debug: 	basedn = "ou=Users,ou=domain,dc=domain,dc=com"
Wed May 16 12:47:25 2012 : Debug: 	filter = "(mailLocalAddress=%{%{Stripped-User-Name}:-%{User-Name}})"
Wed May 16 12:47:25 2012 : Debug: 	base_filter = "(objectclass=radiusprofile)"
Wed May 16 12:47:25 2012 : Debug: 	auto_header = no
Wed May 16 12:47:25 2012 : Debug: 	access_attr_used_for_allow = yes
Wed May 16 12:47:25 2012 : Debug: 	groupname_attribute = "cn"
Wed May 16 12:47:25 2012 : Debug: 	groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))"
Wed May 16 12:47:25 2012 : Debug: 	dictionary_mapping = "/etc/raddb/ldap.attrmap"
Wed May 16 12:47:25 2012 : Debug: 	ldap_debug = 0
Wed May 16 12:47:25 2012 : Debug: 	ldap_connections_number = 5
Wed May 16 12:47:25 2012 : Debug: 	compare_check_items = no
Wed May 16 12:47:25 2012 : Debug: 	do_xlat = yes
Wed May 16 12:47:25 2012 : Debug: 	set_auth_type = yes
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Registering ldap_groupcmp for Ldap-Group
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Creating new attribute ldap_domain-Ldap-Group
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Registering ldap_groupcmp for ldap_domain-Ldap-Group
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Registering ldap_xlat with xlat_name ldap_domain
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Over-riding set_auth_type, as there is no module ldap_domain listed in the "authenticate" section.
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusClass mapped to RADIUS Class
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type
Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id
Wed May 16 12:47:25 2012 : Debug: conns: 0x238d3f0
Wed May 16 12:47:25 2012 : Debug:  Module: Checking session {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_radutmp, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_radutmp
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "radutmp" from file /etc/raddb/modules/radutmp
Wed May 16 12:47:25 2012 : Debug:   radutmp {
Wed May 16 12:47:25 2012 : Debug: 	filename = "/var/log/radius/radutmp"
Wed May 16 12:47:25 2012 : Debug: 	username = "%{User-Name}"
Wed May 16 12:47:25 2012 : Debug: 	case_sensitive = yes
Wed May 16 12:47:25 2012 : Debug: 	check_with_nas = yes
Wed May 16 12:47:25 2012 : Debug: 	perm = 384
Wed May 16 12:47:25 2012 : Debug: 	callerid = yes
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Checking pre-proxy {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Checking post-proxy {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "post_proxy_log" from file /etc/raddb/modules/detail.log
Wed May 16 12:47:25 2012 : Debug:   detail post_proxy_log {
Wed May 16 12:47:25 2012 : Debug: 	detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d"
Wed May 16 12:47:25 2012 : Debug: 	header = "%t"
Wed May 16 12:47:25 2012 : Debug: 	detailperm = 384
Wed May 16 12:47:25 2012 : Debug: 	dirperm = 493
Wed May 16 12:47:25 2012 : Debug: 	locking = no
Wed May 16 12:47:25 2012 : Debug: 	log_packet_header = no
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Checking post-auth {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "reply_log" from file /etc/raddb/modules/detail.log
Wed May 16 12:47:25 2012 : Debug:   detail reply_log {
Wed May 16 12:47:25 2012 : Debug: 	detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d"
Wed May 16 12:47:25 2012 : Debug: 	header = "%t"
Wed May 16 12:47:25 2012 : Debug: 	detailperm = 384
Wed May 16 12:47:25 2012 : Debug: 	dirperm = 493
Wed May 16 12:47:25 2012 : Debug: 	locking = no
Wed May 16 12:47:25 2012 : Debug: 	log_packet_header = no
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "attr_filter.access_reject" from file /etc/raddb/modules/attr_filter
Wed May 16 12:47:25 2012 : Debug:   attr_filter attr_filter.access_reject {
Wed May 16 12:47:25 2012 : Debug: 	attrsfile = "/etc/raddb/attrs.access_reject"
Wed May 16 12:47:25 2012 : Debug: 	key = "%{User-Name}"
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  } # modules
Wed May 16 12:47:25 2012 : Debug: } # server
Wed May 16 12:47:25 2012 : Debug: server { # from file /etc/raddb/radiusd.conf
Wed May 16 12:47:25 2012 : Debug:  modules {
Wed May 16 12:47:25 2012 : Debug:  Module: Checking authenticate {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_digest, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_digest
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "digest" from file /etc/raddb/modules/digest
Wed May 16 12:47:25 2012 : Debug:  Module: Checking authorize {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_preprocess, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_preprocess
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "preprocess" from file /etc/raddb/modules/preprocess
Wed May 16 12:47:25 2012 : Debug:   preprocess {
Wed May 16 12:47:25 2012 : Debug: 	huntgroups = "/etc/raddb/huntgroups"
Wed May 16 12:47:25 2012 : Debug: 	hints = "/etc/raddb/hints"
Wed May 16 12:47:25 2012 : Debug: 	with_ascend_hack = no
Wed May 16 12:47:25 2012 : Debug: 	ascend_channels_per_line = 23
Wed May 16 12:47:25 2012 : Debug: 	with_ntdomain_hack = no
Wed May 16 12:47:25 2012 : Debug: 	with_specialix_jetstream_hack = no
Wed May 16 12:47:25 2012 : Debug: 	with_cisco_vsa_hack = no
Wed May 16 12:47:25 2012 : Debug: 	with_alvarion_vsa_hack = no
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "auth_log" from file /etc/raddb/modules/detail.log
Wed May 16 12:47:25 2012 : Debug:   detail auth_log {
Wed May 16 12:47:25 2012 : Debug: 	detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d"
Wed May 16 12:47:25 2012 : Debug: 	header = "%t"
Wed May 16 12:47:25 2012 : Debug: 	detailperm = 384
Wed May 16 12:47:25 2012 : Debug: 	dirperm = 493
Wed May 16 12:47:25 2012 : Debug: 	locking = no
Wed May 16 12:47:25 2012 : Debug: 	log_packet_header = no
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Checking preacct {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:     (Loaded rlm_acct_unique, checking if it's valid)
Wed May 16 12:47:25 2012 : Debug:  Module: Linked to module rlm_acct_unique
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "acct_unique" from file /etc/raddb/modules/acct_unique
Wed May 16 12:47:25 2012 : Debug:   acct_unique {
Wed May 16 12:47:25 2012 : Debug: 	key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Checking accounting {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "detail" from file /etc/raddb/modules/detail
Wed May 16 12:47:25 2012 : Debug:   detail {
Wed May 16 12:47:25 2012 : Debug: 	detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
Wed May 16 12:47:25 2012 : Debug: 	header = "%t"
Wed May 16 12:47:25 2012 : Debug: 	detailperm = 384
Wed May 16 12:47:25 2012 : Debug: 	dirperm = 493
Wed May 16 12:47:25 2012 : Debug: 	locking = no
Wed May 16 12:47:25 2012 : Debug: 	log_packet_header = no
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Instantiating module "attr_filter.accounting_response" from file /etc/raddb/modules/attr_filter
Wed May 16 12:47:25 2012 : Debug:   attr_filter attr_filter.accounting_response {
Wed May 16 12:47:25 2012 : Debug: 	attrsfile = "/etc/raddb/attrs.accounting_response"
Wed May 16 12:47:25 2012 : Debug: 	key = "%{User-Name}"
Wed May 16 12:47:25 2012 : Debug:   }
Wed May 16 12:47:25 2012 : Debug:  Module: Checking session {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Checking pre-proxy {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Checking post-proxy {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Checking post-auth {...} for more modules to load
Wed May 16 12:47:25 2012 : Debug:  Module: Loading virtual module set_domain_vlan
Wed May 16 12:47:25 2012 : Debug:  } # modules
Wed May 16 12:47:25 2012 : Debug: } # server
Wed May 16 12:47:25 2012 : Debug: radiusd: #### Opening IP addresses and Ports ####
Wed May 16 12:47:25 2012 : Debug: listen {
Wed May 16 12:47:25 2012 : Debug: 	type = "auth"
Wed May 16 12:47:25 2012 : Debug: 	ipaddr = *
Wed May 16 12:47:25 2012 : Debug: 	port = 0
Wed May 16 12:47:25 2012 : Debug: }
Wed May 16 12:47:25 2012 : Debug: listen {
Wed May 16 12:47:25 2012 : Debug: 	type = "acct"
Wed May 16 12:47:25 2012 : Debug: 	ipaddr = *
Wed May 16 12:47:25 2012 : Debug: 	port = 0
Wed May 16 12:47:25 2012 : Debug: }
Wed May 16 12:47:25 2012 : Debug: listen {
Wed May 16 12:47:25 2012 : Debug: 	type = "auth"
Wed May 16 12:47:25 2012 : Debug: 	ipaddr = 127.0.0.1
Wed May 16 12:47:25 2012 : Debug: 	port = 18120
Wed May 16 12:47:25 2012 : Debug: }
Wed May 16 12:47:25 2012 : Debug: Listening on authentication address * port 1812
Wed May 16 12:47:25 2012 : Debug: Listening on accounting address * port 1813
Wed May 16 12:47:25 2012 : Debug: Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel-domain
Wed May 16 12:47:25 2012 : Debug: Listening on proxy address * port 1814
Wed May 16 12:47:25 2012 : Info: Ready to process requests.
rad_recv: Access-Request packet from host 172.30.20.16 port 34809, id=241, length=129
	User-Name = "user01@poc.domain2.fqdn"
	NAS-IP-Address = 172.30.20.16
	NAS-Port = 1812
	MS-CHAP-Challenge = 0x57c171011e737fa4
	MS-CHAP-Response = 0x000100000000000000000000000000000000000000000000000038394ec2dac9ab3d2e76d71779feccca5b80108550e82002
Wed May 16 12:50:44 2012 : Info: # Executing section authorize from file /etc/raddb/sites-enabled/domain
Wed May 16 12:50:44 2012 : Info: +- entering group authorize {...}
Wed May 16 12:50:44 2012 : Info: ++[preprocess] returns ok
Wed May 16 12:50:44 2012 : Info: [auth_log] 	expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.16/auth-detail-20120516
Wed May 16 12:50:44 2012 : Info: [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.16/auth-detail-20120516
Wed May 16 12:50:44 2012 : Info: [auth_log] 	expand: %t -> Wed May 16 12:50:44 2012
Wed May 16 12:50:44 2012 : Info: ++[auth_log] returns ok
Wed May 16 12:50:44 2012 : Info: ++[chap] returns noop
Wed May 16 12:50:44 2012 : Info: [mschap] Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
Wed May 16 12:50:44 2012 : Info: ++[mschap] returns ok
Wed May 16 12:50:44 2012 : Info: ++[digest] returns noop
Wed May 16 12:50:44 2012 : Info: [suffix] Looking up realm "poc.domain2.fqdn" for User-Name = "user01@poc.domain2.fqdn"
Wed May 16 12:50:44 2012 : Info: [suffix] Found realm "poc.domain2.fqdn"
Wed May 16 12:50:44 2012 : Info: [suffix] Adding Realm = "poc.domain2.fqdn"
Wed May 16 12:50:44 2012 : Info: [suffix] Proxying request from user user01 to realm poc.domain2.fqdn
Wed May 16 12:50:44 2012 : Info: [suffix] Preparing to proxy authentication request to realm "poc.domain2.fqdn" 
Wed May 16 12:50:44 2012 : Info: ++[suffix] returns updated
Wed May 16 12:50:44 2012 : Info: [eap_domain] No EAP-Message, not doing EAP
Wed May 16 12:50:44 2012 : Info: ++[eap_domain] returns noop
Wed May 16 12:50:44 2012 : Info: ++[files] returns noop
Wed May 16 12:50:44 2012 : Info: [ldap_domain] performing user authorization for user01@poc.domain2.fqdn
Wed May 16 12:50:44 2012 : Info: [ldap_domain] 	expand: %{Stripped-User-Name} -> 
Wed May 16 12:50:44 2012 : Info: [ldap_domain] 	... expanding second conditional
Wed May 16 12:50:44 2012 : Info: [ldap_domain] 	expand: %{User-Name} -> user01@poc.domain2.fqdn
Wed May 16 12:50:44 2012 : Info: [ldap_domain] 	expand: (mailLocalAddress=%{%{Stripped-User-Name}:-%{User-Name}}) -> (mailLocalAddress=user01@poc.domain2.fqdn)
Wed May 16 12:50:44 2012 : Info: [ldap_domain] 	expand: ou=Users,ou=domain,dc=domain,dc=com -> ou=Users,ou=domain,dc=domain,dc=com
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] ldap_get_conn: Checking Id: 0
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] ldap_get_conn: Got Id: 0
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] attempting LDAP reconnection
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] (re)connect to ldap.svc.be.nl:389, authentication 0
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] bind as / to ldap.svc.be.nl:389
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] waiting for bind result ...
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] Bind was successful
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] performing search in ou=Users,ou=domain,dc=domain,dc=com, with filter (mailLocalAddress=user01@poc.domain2.fqdn)
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] object not found
Wed May 16 12:50:44 2012 : Info: [ldap_domain] search failed
Wed May 16 12:50:44 2012 : Debug:   [ldap_domain] ldap_release_conn: Release Id: 0
Wed May 16 12:50:44 2012 : Info: ++[ldap_domain] returns notfound
Wed May 16 12:50:44 2012 : Info: ++[expiration] returns noop
Wed May 16 12:50:44 2012 : Info: ++[logintime] returns noop
Wed May 16 12:50:44 2012 : Info: ++[pap] returns noop
Wed May 16 12:50:44 2012 : Info:  server metroplus {
Wed May 16 12:50:44 2012 : Info: # Executing section pre-proxy from file /etc/raddb/sites-enabled/metroplus
Wed May 16 12:50:44 2012 : Info: +- entering group pre-proxy {...}
Wed May 16 12:50:44 2012 : Info: ++[files] returns noop
Wed May 16 12:50:44 2012 : Info: [attr_filter.pre-proxy] 	expand: %{Realm} -> poc.domain2.fqdn
Wed May 16 12:50:44 2012 : Debug:  attr_filter: Matched entry DEFAULT at line 50
Wed May 16 12:50:44 2012 : Info: ++[attr_filter.pre-proxy] returns updated
Wed May 16 12:50:44 2012 : Info: [pre_proxy_log] 	expand: /var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.16/pre-proxy-detail-20120516
Wed May 16 12:50:44 2012 : Info: [pre_proxy_log] /var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.16/pre-proxy-detail-20120516
Wed May 16 12:50:44 2012 : Info: [pre_proxy_log] 	expand: %t -> Wed May 16 12:50:44 2012
Wed May 16 12:50:44 2012 : Info: ++[pre_proxy_log] returns ok
Wed May 16 12:50:44 2012 : Info:  }
Sending Access-Request of id 236 to 192.168.201.22 port 1812
	User-Name = "user01@poc.domain2.fqdn"
	NAS-IP-Address = 172.30.20.16
	MS-CHAP-Challenge = 0x57c171011e737fa4
	MS-CHAP-Response = 0x000100000000000000000000000000000000000000000000000038394ec2dac9ab3d2e76d71779feccca5b80108550e82002
	Message-Authenticator := 0x00000000000000000000000000000000
	Proxy-State = 0x323431
Wed May 16 12:50:44 2012 : Info: Proxying request 0 to home server 192.168.201.22 port 1812
Sending Access-Request of id 236 to 192.168.201.22 port 1812
	User-Name = "user01@poc.domain2.fqdn"
	NAS-IP-Address = 172.30.20.16
	MS-CHAP-Challenge = 0x57c171011e737fa4
	MS-CHAP-Response = 0x000100000000000000000000000000000000000000000000000038394ec2dac9ab3d2e76d71779feccca5b80108550e82002
	Message-Authenticator := 0x00000000000000000000000000000000
	Proxy-State = 0x323431
Wed May 16 12:50:44 2012 : Debug: Going to the next request
Wed May 16 12:50:44 2012 : Debug: Waking up in 0.9 seconds.
rad_recv: Access-Accept packet from host 192.168.201.22 port 1812, id=236, length=147
	Proxy-State = 0x323431
	Class = 0x7e02069e0000013700010200c0a8c91600000000000000000000000001cd31e856b2bb200000000000000051
	MS-CHAP-MPPE-Keys = 0x0000000000000000bd1380861c3ea33604446d6b3e05c99d57c171011e737fa4
	MS-CHAP-Domain = "\000POC"
	MS-Link-Utilization-Threshold = 50
	MS-Link-Drop-Time-Limit = 120
Wed May 16 12:50:44 2012 : Info:  server metroplus {
Wed May 16 12:50:44 2012 : Info: # Executing section post-proxy from file /etc/raddb/sites-enabled/metroplus
Wed May 16 12:50:44 2012 : Info: +- entering group post-proxy {...}
Wed May 16 12:50:44 2012 : Info: ++- entering policy set_metroplus_vlan {...}
Wed May 16 12:50:44 2012 : Info: +++[reply] returns noop
Wed May 16 12:50:44 2012 : Info: ++- policy set_metroplus_vlan returns noop
Wed May 16 12:50:44 2012 : Info:  }
Wed May 16 12:50:44 2012 : Info: Found Auth-Type = MSCHAP
Wed May 16 12:50:44 2012 : Info: Found Auth-Type = Accept
Wed May 16 12:50:44 2012 : Error: Warning:  Found 2 auth-types on request for user 'user01@poc.domain2.fqdn'
Wed May 16 12:50:44 2012 : Info: Auth-Type = Accept, accepting the user
Wed May 16 12:50:44 2012 : Info: # Executing section post-auth from file /etc/raddb/sites-enabled/domain
Wed May 16 12:50:44 2012 : Info: +- entering group post-auth {...}
Wed May 16 12:50:44 2012 : Info: ++- entering policy set_domain_vlan {...}
Wed May 16 12:50:44 2012 : Info: +++[reply] returns noop
Wed May 16 12:50:44 2012 : Info: ++- policy set_domain_vlan returns noop
Wed May 16 12:50:44 2012 : Info: [reply_log] 	expand: /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.16/reply-detail-20120516
Wed May 16 12:50:44 2012 : Info: [reply_log] /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.16/reply-detail-20120516
Wed May 16 12:50:44 2012 : Info: [reply_log] 	expand: %t -> Wed May 16 12:50:44 2012
Wed May 16 12:50:44 2012 : Info: ++[reply_log] returns ok
Wed May 16 12:50:44 2012 : Info: ++[exec] returns noop
Sending Access-Accept of id 241 to 172.30.20.16 port 34809
	Aruba-User-Vlan = 2268
	Aruba-User-Role = "authenticated"
	Class = 0x7e02069e0000013700010200c0a8c91600000000000000000000000001cd31e856b2bb200000000000000051
	MS-CHAP-MPPE-Keys = 0x0000000000000000bd1380861c3ea33604446d6b3e05c99d57c171011e737fa4
	MS-CHAP-Domain = "\000POC"
	MS-Link-Utilization-Threshold = 50
	MS-Link-Drop-Time-Limit = 120
Wed May 16 12:50:44 2012 : Info: Finished request 0.
Wed May 16 12:50:44 2012 : Debug: Going to the next request
Wed May 16 12:50:44 2012 : Debug: Waking up in 4.9 seconds.
Wed May 16 12:50:49 2012 : Info: Cleaning up request 0 ID 241 with timestamp +199
Wed May 16 12:50:49 2012 : Info: Ready to process requests.
rad_recv: Access-Request packet from host 172.30.20.47 port 32795, id=172, length=218
	User-Name = "user01@poc.domain2.fqdn"
	NAS-IP-Address = 172.30.27.1
	NAS-Port = 0
	NAS-Identifier = "172.30.27.1"
	NAS-Port-Type = Wireless-802.11
	Calling-Station-Id = "0023144E6060"
	Called-Station-Id = "000B866DB51C"
	Service-Type = Login-User
	Framed-MTU = 1100
	EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262
	Aruba-Essid-Name = "BBTest"
	Aruba-Location-Id = "d8:c7:c8:cb:67:0a"
	Aruba-Attr-10 = 0x544330332d566c6f657232
	Message-Authenticator = 0x07c360094bb24b4a422377fb836f21d3
Wed May 16 12:50:59 2012 : Info: # Executing section authorize from file /etc/raddb/sites-enabled/domain
Wed May 16 12:50:59 2012 : Info: +- entering group authorize {...}
Wed May 16 12:50:59 2012 : Info: ++[preprocess] returns ok
Wed May 16 12:50:59 2012 : Info: [auth_log] 	expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.47/auth-detail-20120516
Wed May 16 12:50:59 2012 : Info: [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.47/auth-detail-20120516
Wed May 16 12:50:59 2012 : Info: [auth_log] 	expand: %t -> Wed May 16 12:50:59 2012
Wed May 16 12:50:59 2012 : Info: ++[auth_log] returns ok
Wed May 16 12:50:59 2012 : Info: ++[chap] returns noop
Wed May 16 12:50:59 2012 : Info: ++[mschap] returns noop
Wed May 16 12:50:59 2012 : Info: ++[digest] returns noop
Wed May 16 12:50:59 2012 : Info: [suffix] Looking up realm "poc.domain2.fqdn" for User-Name = "user01@poc.domain2.fqdn"
Wed May 16 12:50:59 2012 : Info: [suffix] Found realm "poc.domain2.fqdn"
Wed May 16 12:50:59 2012 : Info: [suffix] Adding Realm = "poc.domain2.fqdn"
Wed May 16 12:50:59 2012 : Info: [suffix] Proxying request from user user01 to realm poc.domain2.fqdn
Wed May 16 12:50:59 2012 : Info: [suffix] Preparing to proxy authentication request to realm "poc.domain2.fqdn" 
Wed May 16 12:50:59 2012 : Info: ++[suffix] returns updated
Wed May 16 12:50:59 2012 : Info: [eap_domain] Request is supposed to be proxied to Realm poc.domain2.fqdn.  Not doing EAP.
Wed May 16 12:50:59 2012 : Info: ++[eap_domain] returns noop
Wed May 16 12:50:59 2012 : Info: ++[files] returns noop
Wed May 16 12:50:59 2012 : Info: [ldap_domain] performing user authorization for user01@poc.domain2.fqdn
Wed May 16 12:50:59 2012 : Info: [ldap_domain] 	expand: %{Stripped-User-Name} -> 
Wed May 16 12:50:59 2012 : Info: [ldap_domain] 	... expanding second conditional
Wed May 16 12:50:59 2012 : Info: [ldap_domain] 	expand: %{User-Name} -> user01@poc.domain2.fqdn
Wed May 16 12:50:59 2012 : Info: [ldap_domain] 	expand: (mailLocalAddress=%{%{Stripped-User-Name}:-%{User-Name}}) -> (mailLocalAddress=user01@poc.domain2.fqdn)
Wed May 16 12:50:59 2012 : Info: [ldap_domain] 	expand: ou=Users,ou=domain,dc=domain,dc=com -> ou=Users,ou=domain,dc=domain,dc=com
Wed May 16 12:50:59 2012 : Debug:   [ldap_domain] ldap_get_conn: Checking Id: 0
Wed May 16 12:50:59 2012 : Debug:   [ldap_domain] ldap_get_conn: Got Id: 0
Wed May 16 12:50:59 2012 : Debug:   [ldap_domain] performing search in ou=Users,ou=domain,dc=domain,dc=com, with filter (mailLocalAddress=user01@poc.domain2.fqdn)
Wed May 16 12:50:59 2012 : Debug:   [ldap_domain] object not found
Wed May 16 12:50:59 2012 : Info: [ldap_domain] search failed
Wed May 16 12:50:59 2012 : Debug:   [ldap_domain] ldap_release_conn: Release Id: 0
Wed May 16 12:50:59 2012 : Info: ++[ldap_domain] returns notfound
Wed May 16 12:50:59 2012 : Info: ++[expiration] returns noop
Wed May 16 12:50:59 2012 : Info: ++[logintime] returns noop
Wed May 16 12:50:59 2012 : Info: ++[pap] returns noop
Wed May 16 12:50:59 2012 : Info:  server metroplus {
Wed May 16 12:50:59 2012 : Info: # Executing section pre-proxy from file /etc/raddb/sites-enabled/metroplus
Wed May 16 12:50:59 2012 : Info: +- entering group pre-proxy {...}
Wed May 16 12:50:59 2012 : Info: ++[files] returns noop
Wed May 16 12:50:59 2012 : Info: [attr_filter.pre-proxy] 	expand: %{Realm} -> poc.domain2.fqdn
Wed May 16 12:50:59 2012 : Debug:  attr_filter: Matched entry DEFAULT at line 50
Wed May 16 12:50:59 2012 : Info: ++[attr_filter.pre-proxy] returns updated
Wed May 16 12:50:59 2012 : Info: [pre_proxy_log] 	expand: /var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.47/pre-proxy-detail-20120516
Wed May 16 12:50:59 2012 : Info: [pre_proxy_log] /var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.47/pre-proxy-detail-20120516
Wed May 16 12:50:59 2012 : Info: [pre_proxy_log] 	expand: %t -> Wed May 16 12:50:59 2012
Wed May 16 12:50:59 2012 : Info: ++[pre_proxy_log] returns ok
Wed May 16 12:50:59 2012 : Info:  }
Sending Access-Request of id 120 to 192.168.201.22 port 1812
	User-Name = "user01@poc.domain2.fqdn"
	NAS-IP-Address = 172.30.27.1
	NAS-Identifier = "172.30.27.1"
	EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262
	Message-Authenticator = 0x00000000000000000000000000000000
	Proxy-State = 0x313732
Wed May 16 12:50:59 2012 : Info: Proxying request 1 to home server 192.168.201.22 port 1812
Sending Access-Request of id 120 to 192.168.201.22 port 1812
	User-Name = "user01@poc.domain2.fqdn"
	NAS-IP-Address = 172.30.27.1
	NAS-Identifier = "172.30.27.1"
	EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262
	Message-Authenticator = 0x00000000000000000000000000000000
	Proxy-State = 0x313732
Wed May 16 12:50:59 2012 : Debug: Going to the next request
Wed May 16 12:50:59 2012 : Debug: Waking up in 0.9 seconds.
Wed May 16 12:51:00 2012 : Debug: Waking up in 28.9 seconds.
rad_recv: Access-Request packet from host 172.30.20.47 port 32795, id=172, length=218
Wed May 16 12:51:04 2012 : Info: Sending duplicate proxied request to home server 192.168.201.22 port 1812 - ID: 120
Sending Access-Request of id 120 to 192.168.201.22 port 1812
	User-Name = "user01@poc.domain2.fqdn"
	NAS-IP-Address = 172.30.27.1
	NAS-Identifier = "172.30.27.1"
	EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262
	Message-Authenticator = 0x00000000000000000000000000000000
	Proxy-State = 0x313732
Wed May 16 12:51:04 2012 : Debug: Waking up in 25.0 seconds.
rad_recv: Access-Request packet from host 172.30.20.47 port 32795, id=172, length=218
Wed May 16 12:51:09 2012 : Info: Sending duplicate proxied request to home server 192.168.201.22 port 1812 - ID: 120
Sending Access-Request of id 120 to 192.168.201.22 port 1812
	User-Name = "user01@poc.domain2.fqdn"
	NAS-IP-Address = 172.30.27.1
	NAS-Identifier = "172.30.27.1"
	EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262
	Message-Authenticator = 0x00000000000000000000000000000000
	Proxy-State = 0x313732
Wed May 16 12:51:09 2012 : Debug: Waking up in 20.0 seconds.
rad_recv: Access-Request packet from host 172.30.20.47 port 32795, id=172, length=218
Wed May 16 12:51:14 2012 : Info: Sending duplicate proxied request to home server 192.168.201.22 port 1812 - ID: 120
Sending Access-Request of id 120 to 192.168.201.22 port 1812
	User-Name = "user01@poc.domain2.fqdn"
	NAS-IP-Address = 172.30.27.1
	NAS-Identifier = "172.30.27.1"
	EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262
	Message-Authenticator = 0x00000000000000000000000000000000
	Proxy-State = 0x313732
Wed May 16 12:51:14 2012 : Debug: Waking up in 15.0 seconds.
Wed May 16 12:51:29 2012 : Info: WARNING: Internal sanity check failed in event handler for request 1: Discarding the request!
Wed May 16 12:51:29 2012 : Info: Ready to process requests.
