<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Having a bizarre problem that started due to someone in my department deleting the samba computer account for my freeradius machine. I recreated it and for a time everything went back to normal, but later that afternoon all of my apple
clients can simply not connect to our 802.1x enabled wireless network. We are using Cisco wireless controllers. Radiusd –X doesn’t seem to be giving me enough debug output. Is there any suggestion as to drill down further to see what is going on here. I am
having no issues with my Windows 7 clients and Windows mobile devices. Simply not getting enough information. Everything has been working fine for months and I don’t understand why all of the sudden this is going on and why its only affecting Apple IOS devices
and iMacs so far. Here’s an example output. This simply loops over and over again:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">rad_recv: Access-Request packet from host 172.20.9.253 port 32769, id=63, length=228<o:p></o:p></p>
<p class="MsoNormal"> User-Name = "oclarke"<o:p></o:p></p>
<p class="MsoNormal"> Calling-Station-Id = "10-40-f3-27-b9-83"<o:p></o:p></p>
<p class="MsoNormal"> Called-Station-Id = "00-1f-c9-ff-8a-d0:s-wsc"<o:p></o:p></p>
<p class="MsoNormal"> NAS-Port = 29<o:p></o:p></p>
<p class="MsoNormal"> Cisco-AVPair = "audit-session-id=ac1409fd000000085042b3cc"<o:p></o:p></p>
<p class="MsoNormal"> NAS-IP-Address = 172.20.9.253<o:p></o:p></p>
<p class="MsoNormal"> NAS-Identifier = "diller-wism-b"<o:p></o:p></p>
<p class="MsoNormal"> Airespace-Wlan-Id = 4<o:p></o:p></p>
<p class="MsoNormal"> Service-Type = Framed-User<o:p></o:p></p>
<p class="MsoNormal"> Framed-MTU = 1300<o:p></o:p></p>
<p class="MsoNormal"> NAS-Port-Type = Wireless-802.11<o:p></o:p></p>
<p class="MsoNormal"> Tunnel-Type:0 = VLAN<o:p></o:p></p>
<p class="MsoNormal"> Tunnel-Medium-Type:0 = IEEE-802<o:p></o:p></p>
<p class="MsoNormal"> Tunnel-Private-Group-Id:0 = "891"<o:p></o:p></p>
<p class="MsoNormal"> EAP-Message = 0x0207000c016f636c61726b65<o:p></o:p></p>
<p class="MsoNormal"> Message-Authenticator = 0x6015385c05fd07141cd27b2bd7d4452a<o:p></o:p></p>
<p class="MsoNormal"># Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default<o:p></o:p></p>
<p class="MsoNormal">+- entering group authorize {...}<o:p></o:p></p>
<p class="MsoNormal">++[preprocess] returns ok<o:p></o:p></p>
<p class="MsoNormal">++[chap] returns noop<o:p></o:p></p>
<p class="MsoNormal">++[mschap] returns noop<o:p></o:p></p>
<p class="MsoNormal">++[digest] returns noop<o:p></o:p></p>
<p class="MsoNormal">[IPASS] No '/' in User-Name = "oclarke", looking up realm NULL<o:p></o:p></p>
<p class="MsoNormal">[IPASS] No such realm "NULL"<o:p></o:p></p>
<p class="MsoNormal">++[IPASS] returns noop<o:p></o:p></p>
<p class="MsoNormal">[suffix] No '@' in User-Name = "oclarke", looking up realm NULL<o:p></o:p></p>
<p class="MsoNormal">[suffix] No such realm "NULL"<o:p></o:p></p>
<p class="MsoNormal">++[suffix] returns noop<o:p></o:p></p>
<p class="MsoNormal">[ntdomain] No '\' in User-Name = "oclarke", looking up realm NULL<o:p></o:p></p>
<p class="MsoNormal">[ntdomain] No such realm "NULL"<o:p></o:p></p>
<p class="MsoNormal">++[ntdomain] returns noop<o:p></o:p></p>
<p class="MsoNormal">[eap] EAP packet type response id 7 length 12<o:p></o:p></p>
<p class="MsoNormal">[eap] No EAP Start, assuming it's an on-going EAP conversation<o:p></o:p></p>
<p class="MsoNormal">++[eap] returns updated<o:p></o:p></p>
<p class="MsoNormal">[files] users: Matched entry DEFAULT at line 216<o:p></o:p></p>
<p class="MsoNormal">++[files] returns ok<o:p></o:p></p>
<p class="MsoNormal">++[expiration] returns noop<o:p></o:p></p>
<p class="MsoNormal">++[logintime] returns noop<o:p></o:p></p>
<p class="MsoNormal">[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.<o:p></o:p></p>
<p class="MsoNormal">++[pap] returns noop<o:p></o:p></p>
<p class="MsoNormal">Found Auth-Type = EAP<o:p></o:p></p>
<p class="MsoNormal"># Executing group from file /usr/local/etc/raddb/sites-enabled/default<o:p></o:p></p>
<p class="MsoNormal">+- entering group authenticate {...}<o:p></o:p></p>
<p class="MsoNormal">[eap] EAP Identity<o:p></o:p></p>
<p class="MsoNormal">[eap] processing type tls<o:p></o:p></p>
<p class="MsoNormal">[tls] Initiate<o:p></o:p></p>
<p class="MsoNormal">[tls] Start returned 1<o:p></o:p></p>
<p class="MsoNormal">++[eap] returns handled<o:p></o:p></p>
<p class="MsoNormal">Sending Access-Challenge of id 63 to 172.20.9.253 port 32769<o:p></o:p></p>
<p class="MsoNormal"> EAP-Message = 0x010800061920<o:p></o:p></p>
<p class="MsoNormal"> Message-Authenticator = 0x00000000000000000000000000000000<o:p></o:p></p>
<p class="MsoNormal"> State = 0x0ca5d3010cadca632a899d669d6fd38b<o:p></o:p></p>
<p class="MsoNormal">Finished request 218.<o:p></o:p></p>
<p class="MsoNormal">Going to the next request<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>