<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
<b>I did this question yesterday, but since im new i did a lot of wrong things, like no subject, etc etc.</b><div><b>So here is the deal, we use freeradius on a hotspot service with wireless and it works all fine, but we are trying to put 802.1x (its better)</b></div><div><b>So the thing is, it always say "login/pass incorrect"</b></div><div><b><br></b></div><div><b>So i did the debug thing, and i couldnt find the error (im new on linux)</b></div><div><b><br></b></div><div><b>I did the radtest and the results are the following:</b></div><div><b><br></b></div><div><b>radtest -t mschap <user> <pass> 127.0.0.1:1812 0 t3st3 (our pass)</b></div><div><b>and i got this </b></div><div><div><br></div><div>Sending Access-Request of id 193 to 127.0.0.1 port 1812</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>User-Name = "1085"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-IP-Address = 192.168.80.2</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-Port = 0</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>MS-CHAP-Challenge = 0x826bf8043e1d4ecf</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>MS-CHAP-Response = 0x0001000000000000000000000000000000000000000000000000cb7fdf6848ca0b2df86e5060da2c2b8e80329c405855233a</div></div><div><span style="font-size: 10pt;"> </span><span style="font-size: 10pt;">rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=193, length=20 "</span></div><div><span style="font-size: 10pt;"><br></span></div><div><span style="font-size: 10pt;"><b>so i did another test like this:</b></span></div><div><span style="font-size: 10pt;"><b><br></b></span></div><div><b>radtest -t eap-md5 <user> <pass> 127.0.0.1:1812 0 t3st3</b></div><div><b><br></b></div><div><b>and i got this </b></div><div><br></div><div><div>Sending Access-Request packet to host 127.0.0.1 port 1812, id=54, length=0</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>User-Name = "1085"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>User-Password = "XXXXXXX"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-IP-Address = 192.168.80.2</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-Port = 0</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>EAP-Code = Response</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>EAP-Type-Identity = "1085"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Message-Authenticator = 0x00</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>EAP-Message = 0x023500090131303835</div><div>Received Access-Challenge packet from host 127.0.0.1 port 1812, id=54, length=64</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>EAP-Message = 0x013600061520</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Message-Authenticator = 0x56eff2711d27219b78bc42ad7db31808</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>State = 0x028cb41e02baa1b18a40110649d7000f</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>EAP-Id = 54</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>EAP-Code = Request</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>EAP-Type-LEAP = 0x20</div></div><div><br></div><div><b>I dont know what is wrong, i THINK its our SQL BD that is not accepting mschap.</b></div><div><b>I would appreciate that people dont answer like "read this, read that, its all explained", like i said, im new on linux, i read everything i found, but didnt got the problem</b></div><div><b>Appreciate any help.</b></div><div><b><br></b></div><div><b>Below is my debug trying to access by the wireless.</b></div><div><br></div><div>
<p class="western" style="margin-bottom: 0cm">[tls] Initiate
</p>
<p class="western" style="margin-bottom: 0cm">[tls] Start returned 1
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns handled
</p>
<p class="western" style="margin-bottom: 0cm">Sending
Access-Challenge of id 179 to 172.23.54.2 port 32784
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x010200061920
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea42de2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm">Finished request 17.
</p>
<p class="western" style="margin-bottom: 0cm">Going to the next
request
</p>
<p class="western" style="margin-bottom: 0cm">Waking up in 4.9
seconds.
</p>
<p class="western" style="margin-bottom: 0cm">rad_recv:
Access-Request packet from host 172.23.54.2 port 32784, id=180,
length=320
</p>
<p class="western" style="margin-bottom: 0cm"> User-Name = "1085"
</p>
<p class="western" style="margin-bottom: 0cm"> Calling-Station-Id =
"00-1E-64-27-2F-52"
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-IP-Address =
172.23.54.2
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port = 1
</p>
<p class="western" style="margin-bottom: 0cm"> Called-Station-Id =
"68-92-34-91-91-48:UNIFEBE-1X"
</p>
<p class="western" style="margin-bottom: 0cm"> Service-Type =
Framed-User
</p>
<p class="western" style="margin-bottom: 0cm"> Framed-MTU = 1400
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port-Type =
Wireless-802.11
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Identifier =
"68-92-34-91-91-48"
</p>
<p class="western" style="margin-bottom: 0cm"> Connect-Info =
"CONNECT 802.11b/g"
</p>
<p class="western" style="margin-bottom: 0cm"> WISPr-Location-Name =
"2o-Andar"
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0202006919800000005f160301005a010000560301509d3fc22ba4ec181253508b1a9031d084a6ab63dfc0f57196d85dccbddd6bb0000018002f00350005000ac013c014c009c00a003200380013000401000015ff01000100000a0006000400170018000b00020100
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea42de2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm"> Vendor-25053-Attr-3 =
0x554e49464542452d3158
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0xb15471a260ff863b5df11a42d1b7ffaf
</p>
<p class="western" style="margin-bottom: 0cm"># Executing section
authorize from file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authorize {...}
</p>
<p class="western" style="margin-bottom: 0cm">++[preprocess] returns
ok
</p>
<p class="western" style="margin-bottom: 0cm">++[chap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[mschap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[digest] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No '@' in
User-Name = "1085", looking up realm NULL
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No such realm
"NULL"
</p>
<p class="western" style="margin-bottom: 0cm">++[suffix] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP packet type
response id 2 length 105
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Continuing tunnel
setup.
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns ok
</p>
<p class="western" style="margin-bottom: 0cm">Found Auth-Type = EAP
</p>
<p class="western" style="margin-bottom: 0cm"># Executing group from
file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authenticate {...}
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Request found,
released from the list
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP/peap
</p>
<p class="western" style="margin-bottom: 0cm">[eap] processing type
peap
</p>
<p class="western" style="margin-bottom: 0cm">[peap] processing
EAP-TLS
</p>
<p class="western" style="margin-bottom: 0cm"> TLS Length 95
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Length Included
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_verify
returned 11
</p>
<p class="western" style="margin-bottom: 0cm">[peap] (other):
before/accept initialization
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
before/accept initialization
</p>
<p class="western" style="margin-bottom: 0cm">[peap] <<< TLS
1.0 Handshake [length 005a], ClientHello
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 read client hello A
</p>
<p class="western" style="margin-bottom: 0cm">[peap] >>> TLS
1.0 Handshake [length 0031], ServerHello
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 write server hello A
</p>
<p class="western" style="margin-bottom: 0cm">[peap] >>> TLS
1.0 Handshake [length 02a8], Certificate
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 write certificate A
</p>
<p class="western" style="margin-bottom: 0cm">[peap] >>> TLS
1.0 Handshake [length 0004], ServerHelloDone
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 write server done A
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 flush data
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
Need to read more data: SSLv3 read client certificate A
</p>
<p class="western" style="margin-bottom: 0cm">In SSL Handshake Phase
</p>
<p class="western" style="margin-bottom: 0cm">In SSL Accept mode
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_process
returned 13
</p>
<p class="western" style="margin-bottom: 0cm">[peap] EAPTLS_HANDLED
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns handled
</p>
<p class="western" style="margin-bottom: 0cm">Sending
Access-Challenge of id 180 to 172.23.54.2 port 32784
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x010302f2190016030100310200002d0301509d3ef1415eda32ffcebd3266fe173cbfff89917ae81eda6972831a026a39a700002f000005ff0100010016030102a80b0002a40002a100029e3082029a30820182020900bd56242da73748dd300d06092a864886f70d0101050500300f310d300b0603550403130464617274301e170d3132303632383139343531345a170d3232303632363139343531345a300f310d300b060355040313046461727430820122300d06092a864886f70d01010105000382010f003082010a0282010100ca6b2f404628ab86daf42a6fc6bf84841fc22515227dff73a183a6f51a2a22db61143afc8486ff59813449b110
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
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
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0xe16a72c80fb15970c51859f996942e88e6a675834788ab9aa5a57af1a335b4513acd5c39cf3b63151368dac86c6ad0ba965a52636b998d220534d3c913a6f2d64baa46a14d877a6f1a1afdedd7dcc9f990b0ba6b0181cc15abbcab5de4ae2adf002de566cac739b11c770b727a104b4359905dbbf0889cad18af0f31e5be5f28b6619edefff2edc1a5ea6683805b51d1cbeb05c250d23a402de0f4443f01d4a7ddc4bf4ea950151f42aee22dc1c9a81f18aa219499adff4095f9fb6dc2e44f89fe14c0e2f30007748bd4deba341982af01ed8d09dad9bbfcc0ceaa2f4b3d3d94add25259cba48886d837b49af75a8f16030100040e000000
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea72ce2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm">Finished request 18.
</p>
<p class="western" style="margin-bottom: 0cm">Going to the next
request
</p>
<p class="western" style="margin-bottom: 0cm">Waking up in 4.9
seconds.
</p>
<p class="western" style="margin-bottom: 0cm">rad_recv:
Access-Request packet from host 172.23.54.2 port 32784, id=181,
length=553
</p>
<p class="western" style="margin-bottom: 0cm"> User-Name = "1085"
</p>
<p class="western" style="margin-bottom: 0cm"> Calling-Station-Id =
"00-1E-64-27-2F-52"
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-IP-Address =
172.23.54.2
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port = 1
</p>
<p class="western" style="margin-bottom: 0cm"> Called-Station-Id =
"68-92-34-91-91-48:UNIFEBE-1X"
</p>
<p class="western" style="margin-bottom: 0cm"> Service-Type =
Framed-User
</p>
<p class="western" style="margin-bottom: 0cm"> Framed-MTU = 1400
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port-Type =
Wireless-802.11
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Identifier =
"68-92-34-91-91-48"
</p>
<p class="western" style="margin-bottom: 0cm"> Connect-Info =
"CONNECT 802.11b/g"
</p>
<p class="western" style="margin-bottom: 0cm"> WISPr-Location-Name =
"2o-Andar"
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
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
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x469ea987e74a634ffd9f974fd85c4cf550cfc184882b10d31403010001011603010030c7823f5df8656cb4ecee2830f2dd532e33febb88329d8078398bcf9fc3729371e6acabeeee9022d11176d95facb50e26
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea72ce2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm"> Vendor-25053-Attr-3 =
0x554e49464542452d3158
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x6b79b9cd6b15dfedbf49ba57b7edcc45
</p>
<p class="western" style="margin-bottom: 0cm"># Executing section
authorize from file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authorize {...}
</p>
<p class="western" style="margin-bottom: 0cm">++[preprocess] returns
ok
</p>
<p class="western" style="margin-bottom: 0cm">++[chap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[mschap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[digest] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No '@' in
User-Name = "1085", looking up realm NULL
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No such realm
"NULL"
</p>
<p class="western" style="margin-bottom: 0cm">++[suffix] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP packet type
response id 3 length 253
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Continuing tunnel
setup.
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns ok
</p>
<p class="western" style="margin-bottom: 0cm">Found Auth-Type = EAP
</p>
<p class="western" style="margin-bottom: 0cm"># Executing group from
file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authenticate {...}
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Request found,
released from the list
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP/peap
</p>
<p class="western" style="margin-bottom: 0cm">[eap] processing type
peap
</p>
<p class="western" style="margin-bottom: 0cm">[peap] processing
EAP-TLS
</p>
<p class="western" style="margin-bottom: 0cm"> TLS Length 326
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Length Included
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_verify
returned 11
</p>
<p class="western" style="margin-bottom: 0cm">[peap] <<< TLS
1.0 Handshake [length 0106], ClientKeyExchange
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 read client key exchange A
</p>
<p class="western" style="margin-bottom: 0cm">[peap] <<< TLS
1.0 ChangeCipherSpec [length 0001]
</p>
<p class="western" style="margin-bottom: 0cm">[peap] <<< TLS
1.0 Handshake [length 0010], Finished
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 read finished A
</p>
<p class="western" style="margin-bottom: 0cm">[peap] >>> TLS
1.0 ChangeCipherSpec [length 0001]
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 write change cipher spec A
</p>
<p class="western" style="margin-bottom: 0cm">[peap] >>> TLS
1.0 Handshake [length 0010], Finished
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 write finished A
</p>
<p class="western" style="margin-bottom: 0cm">[peap] TLS_accept:
SSLv3 flush data
</p>
<p class="western" style="margin-bottom: 0cm">[peap] (other): SSL
negotiation finished successfully
</p>
<p class="western" style="margin-bottom: 0cm">SSL Connection
Established
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_process
returned 13
</p>
<p class="western" style="margin-bottom: 0cm">[peap] EAPTLS_HANDLED
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns handled
</p>
<p class="western" style="margin-bottom: 0cm">Sending
Access-Challenge of id 181 to 172.23.54.2 port 32784
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x01040041190014030100010116030100305da09efb263d6a8e920ffd363a784a928bc392a6b80309b6f3f3d78becca6e3f7f2f20b3fb0b62520e46decd844eafec
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea62be2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm">Finished request 19.
</p>
<p class="western" style="margin-bottom: 0cm">Going to the next
request
</p>
<p class="western" style="margin-bottom: 0cm">Waking up in 4.9
seconds.
</p>
<p class="western" style="margin-bottom: 0cm">rad_recv:
Access-Request packet from host 172.23.54.2 port 32784, id=182,
length=221
</p>
<p class="western" style="margin-bottom: 0cm"> User-Name = "1085"
</p>
<p class="western" style="margin-bottom: 0cm"> Calling-Station-Id =
"00-1E-64-27-2F-52"
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-IP-Address =
172.23.54.2
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port = 1
</p>
<p class="western" style="margin-bottom: 0cm"> Called-Station-Id =
"68-92-34-91-91-48:UNIFEBE-1X"
</p>
<p class="western" style="margin-bottom: 0cm"> Service-Type =
Framed-User
</p>
<p class="western" style="margin-bottom: 0cm"> Framed-MTU = 1400
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port-Type =
Wireless-802.11
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Identifier =
"68-92-34-91-91-48"
</p>
<p class="western" style="margin-bottom: 0cm"> Connect-Info =
"CONNECT 802.11b/g"
</p>
<p class="western" style="margin-bottom: 0cm"> WISPr-Location-Name =
"2o-Andar"
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x020400061900
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea62be2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm"> Vendor-25053-Attr-3 =
0x554e49464542452d3158
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x21e270d06fa3b618166b474599d92c03
</p>
<p class="western" style="margin-bottom: 0cm"># Executing section
authorize from file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authorize {...}
</p>
<p class="western" style="margin-bottom: 0cm">++[preprocess] returns
ok
</p>
<p class="western" style="margin-bottom: 0cm">++[chap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[mschap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[digest] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No '@' in
User-Name = "1085", looking up realm NULL
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No such realm
"NULL"
</p>
<p class="western" style="margin-bottom: 0cm">++[suffix] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP packet type
response id 4 length 6
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Continuing tunnel
setup.
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns ok
</p>
<p class="western" style="margin-bottom: 0cm">Found Auth-Type = EAP
</p>
<p class="western" style="margin-bottom: 0cm"># Executing group from
file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authenticate {...}
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Request found,
released from the list
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP/peap
</p>
<p class="western" style="margin-bottom: 0cm">[eap] processing type
peap
</p>
<p class="western" style="margin-bottom: 0cm">[peap] processing
EAP-TLS
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Received TLS ACK
</p>
<p class="western" style="margin-bottom: 0cm">[peap] ACK handshake is
finished
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_verify
returned 3
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_process
returned 3
</p>
<p class="western" style="margin-bottom: 0cm">[peap] EAPTLS_SUCCESS
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Session
established. Decoding tunneled attributes.
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Peap state
TUNNEL ESTABLISHED
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns handled
</p>
<p class="western" style="margin-bottom: 0cm">Sending
Access-Challenge of id 182 to 172.23.54.2 port 32784
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0105002b190017030100209c58a55d01f6f8ea2ebd4dcf6b707ac1854afc0ae1184210876df755426cdebb
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea12ae2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm">Finished request 20.
</p>
<p class="western" style="margin-bottom: 0cm">Going to the next
request
</p>
<p class="western" style="margin-bottom: 0cm">Waking up in 4.9
seconds.
</p>
<p class="western" style="margin-bottom: 0cm">rad_recv:
Access-Request packet from host 172.23.54.2 port 32784, id=183,
length=258
</p>
<p class="western" style="margin-bottom: 0cm"> User-Name = "1085"
</p>
<p class="western" style="margin-bottom: 0cm"> Calling-Station-Id =
"00-1E-64-27-2F-52"
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-IP-Address =
172.23.54.2
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port = 1
</p>
<p class="western" style="margin-bottom: 0cm"> Called-Station-Id =
"68-92-34-91-91-48:UNIFEBE-1X"
</p>
<p class="western" style="margin-bottom: 0cm"> Service-Type =
Framed-User
</p>
<p class="western" style="margin-bottom: 0cm"> Framed-MTU = 1400
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port-Type =
Wireless-802.11
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Identifier =
"68-92-34-91-91-48"
</p>
<p class="western" style="margin-bottom: 0cm"> Connect-Info =
"CONNECT 802.11b/g"
</p>
<p class="western" style="margin-bottom: 0cm"> WISPr-Location-Name =
"2o-Andar"
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0205002b1900170301002045585f4e63ddae7a1c000e31e0a2eeece7eaa624f2806a9e70e2d046f1391fc7
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea12ae2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm"> Vendor-25053-Attr-3 =
0x554e49464542452d3158
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x69f09f61ebca4c76283b5dca004e7ef0
</p>
<p class="western" style="margin-bottom: 0cm"># Executing section
authorize from file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authorize {...}
</p>
<p class="western" style="margin-bottom: 0cm">++[preprocess] returns
ok
</p>
<p class="western" style="margin-bottom: 0cm">++[chap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[mschap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[digest] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No '@' in
User-Name = "1085", looking up realm NULL
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No such realm
"NULL"
</p>
<p class="western" style="margin-bottom: 0cm">++[suffix] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP packet type
response id 5 length 43
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Continuing tunnel
setup.
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns ok
</p>
<p class="western" style="margin-bottom: 0cm">Found Auth-Type = EAP
</p>
<p class="western" style="margin-bottom: 0cm"># Executing group from
file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authenticate {...}
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Request found,
released from the list
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP/peap
</p>
<p class="western" style="margin-bottom: 0cm">[eap] processing type
peap
</p>
<p class="western" style="margin-bottom: 0cm">[peap] processing
EAP-TLS
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_verify
returned 7
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Done initial
handshake
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_process
returned 7
</p>
<p class="western" style="margin-bottom: 0cm">[peap] EAPTLS_OK
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Session
established. Decoding tunneled attributes.
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Peap state
WAITING FOR INNER IDENTITY
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Identity - 1085
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Got inner
identity '1085'
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Setting default
EAP type for tunneled EAP session.
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Got tunneled
request
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x020500090131303835
</p>
<p class="western" style="margin-bottom: 0cm">server {
</p>
<p class="western" style="margin-bottom: 0cm"> PEAP: Setting
User-Name to 1085
</p>
<p class="western" style="margin-bottom: 0cm">Sending tunneled
request
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x020500090131303835
</p>
<p class="western" style="margin-bottom: 0cm"> FreeRADIUS-Proxied-To
= 127.0.0.1
</p>
<p class="western" style="margin-bottom: 0cm"> User-Name = "1085"
</p>
<p class="western" style="margin-bottom: 0cm">server inner-tunnel {
</p>
<p class="western" style="margin-bottom: 0cm"># Executing section
authorize from file /etc/freeradius/sites-enabled/inner-tunnel
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authorize {...}
</p>
<p class="western" style="margin-bottom: 0cm">++[chap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[mschap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No '@' in
User-Name = "1085", looking up realm NULL
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No such realm
"NULL"
</p>
<p class="western" style="margin-bottom: 0cm">++[suffix] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[control] returns
noop
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP packet type
response id 5 length 9
</p>
<p class="western" style="margin-bottom: 0cm">[eap] No EAP Start,
assuming it's an on-going EAP conversation
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns updated
</p>
<p class="western" style="margin-bottom: 0cm">++[files] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[expiration] returns
noop
</p>
<p class="western" style="margin-bottom: 0cm">++[logintime] returns
noop
</p>
<p class="western" style="margin-bottom: 0cm">++[pap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">Found Auth-Type = EAP
</p>
<p class="western" style="margin-bottom: 0cm"># Executing group from
file /etc/freeradius/sites-enabled/inner-tunnel
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authenticate {...}
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP Identity
</p>
<p class="western" style="margin-bottom: 0cm">[eap] processing type
mschapv2
</p>
<p class="western" style="margin-bottom: 0cm">rlm_eap_mschapv2:
Issuing Challenge
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns handled
</p>
<p class="western" style="margin-bottom: 0cm">} # server inner-tunnel
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Got tunneled
reply code 11
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0106001e1a0106001910fe55d9294cefdac440362e653915a34d31303835
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0x0ae4ec900ae2f69ac6f652def380e816
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Got tunneled
reply RADIUS code 11
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0106001e1a0106001910fe55d9294cefdac440362e653915a34d31303835
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0x0ae4ec900ae2f69ac6f652def380e816
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Got tunneled
Access-Challenge
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns handled
</p>
<p class="western" style="margin-bottom: 0cm">Sending
Access-Challenge of id 183 to 172.23.54.2 port 32784
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0106003b190017030100301000c355cc2c2884bf2f175908e52361b9e5f41b4a0e9a0435c322c46fe8a3c1bc2ddc42ac866a83ae30421b91059630
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea029e2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm">Finished request 21.
</p>
<p class="western" style="margin-bottom: 0cm">Going to the next
request
</p>
<p class="western" style="margin-bottom: 0cm">Waking up in 4.9
seconds.
</p>
<p class="western" style="margin-bottom: 0cm">rad_recv:
Access-Request packet from host 172.23.54.2 port 32784, id=184,
length=306
</p>
<p class="western" style="margin-bottom: 0cm"> User-Name = "1085"
</p>
<p class="western" style="margin-bottom: 0cm"> Calling-Station-Id =
"00-1E-64-27-2F-52"
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-IP-Address =
172.23.54.2
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port = 1
</p>
<p class="western" style="margin-bottom: 0cm"> Called-Station-Id =
"68-92-34-91-91-48:UNIFEBE-1X"
</p>
<p class="western" style="margin-bottom: 0cm"> Service-Type =
Framed-User
</p>
<p class="western" style="margin-bottom: 0cm"> Framed-MTU = 1400
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port-Type =
Wireless-802.11
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Identifier =
"68-92-34-91-91-48"
</p>
<p class="western" style="margin-bottom: 0cm"> Connect-Info =
"CONNECT 802.11b/g"
</p>
<p class="western" style="margin-bottom: 0cm"> WISPr-Location-Name =
"2o-Andar"
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0206005b19001703010050ae4fea85f3a5973a84f9b5e1abc47fb5a19be28af5e27780d39c7c29b91526c26e3972a03bee2657e96c715084bd5a5cf5da7d84cda132385eaa3a0d1733b5618ee6286e6e3670119927319542bcb7d2
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea029e2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm"> Vendor-25053-Attr-3 =
0x554e49464542452d3158
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x687b1f3b1c9e04fc75d21d0f741b661f
</p>
<p class="western" style="margin-bottom: 0cm"># Executing section
authorize from file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authorize {...}
</p>
<p class="western" style="margin-bottom: 0cm">++[preprocess] returns
ok
</p>
<p class="western" style="margin-bottom: 0cm">++[chap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[mschap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[digest] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No '@' in
User-Name = "1085", looking up realm NULL
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No such realm
"NULL"
</p>
<p class="western" style="margin-bottom: 0cm">++[suffix] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP packet type
response id 6 length 91
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Continuing tunnel
setup.
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns ok
</p>
<p class="western" style="margin-bottom: 0cm">Found Auth-Type = EAP
</p>
<p class="western" style="margin-bottom: 0cm"># Executing group from
file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authenticate {...}
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Request found,
released from the list
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP/peap
</p>
<p class="western" style="margin-bottom: 0cm">[eap] processing type
peap
</p>
<p class="western" style="margin-bottom: 0cm">[peap] processing
EAP-TLS
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_verify
returned 7
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Done initial
handshake
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_process
returned 7
</p>
<p class="western" style="margin-bottom: 0cm">[peap] EAPTLS_OK
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Session
established. Decoding tunneled attributes.
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Peap state
phase2
</p>
<p class="western" style="margin-bottom: 0cm">[peap] EAP type
mschapv2
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Got tunneled
request
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0206003f1a0206003a312198129fe508198faceab807ca41f5580000000000000000bb3261067e2d36651cf535d4d562658d61830fcce9f2a88f0031303835
</p>
<p class="western" style="margin-bottom: 0cm">server {
</p>
<p class="western" style="margin-bottom: 0cm"> PEAP: Setting
User-Name to 1085
</p>
<p class="western" style="margin-bottom: 0cm">Sending tunneled
request
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0206003f1a0206003a312198129fe508198faceab807ca41f5580000000000000000bb3261067e2d36651cf535d4d562658d61830fcce9f2a88f0031303835
</p>
<p class="western" style="margin-bottom: 0cm"> FreeRADIUS-Proxied-To
= 127.0.0.1
</p>
<p class="western" style="margin-bottom: 0cm"> User-Name = "1085"
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0x0ae4ec900ae2f69ac6f652def380e816
</p>
<p class="western" style="margin-bottom: 0cm">server inner-tunnel {
</p>
<p class="western" style="margin-bottom: 0cm"># Executing section
authorize from file /etc/freeradius/sites-enabled/inner-tunnel
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authorize {...}
</p>
<p class="western" style="margin-bottom: 0cm">++[chap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[mschap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No '@' in
User-Name = "1085", looking up realm NULL
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No such realm
"NULL"
</p>
<p class="western" style="margin-bottom: 0cm">++[suffix] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[control] returns
noop
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP packet type
response id 6 length 63
</p>
<p class="western" style="margin-bottom: 0cm">[eap] No EAP Start,
assuming it's an on-going EAP conversation
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns updated
</p>
<p class="western" style="margin-bottom: 0cm">++[files] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[expiration] returns
noop
</p>
<p class="western" style="margin-bottom: 0cm">++[logintime] returns
noop
</p>
<p class="western" style="margin-bottom: 0cm">++[pap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">Found Auth-Type = EAP
</p>
<p class="western" style="margin-bottom: 0cm"># Executing group from
file /etc/freeradius/sites-enabled/inner-tunnel
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authenticate {...}
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Request found,
released from the list
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP/mschapv2
</p>
<p class="western" style="margin-bottom: 0cm">[eap] processing type
mschapv2
</p>
<p class="western" style="margin-bottom: 0cm">[mschapv2] # Executing
group from file /etc/freeradius/sites-enabled/inner-tunnel
</p>
<p class="western" style="margin-bottom: 0cm">[mschapv2] +- entering
group MS-CHAP {...}
</p>
<p class="western" style="margin-bottom: 0cm">[mschap] No
Cleartext-Password configured. Cannot create LM-Password.
</p>
<p class="western" style="margin-bottom: 0cm">[mschap] No
Cleartext-Password configured. Cannot create NT-Password.
</p>
<p class="western" style="margin-bottom: 0cm">[mschap] Creating
challenge hash with username: 1085
</p>
<p class="western" style="margin-bottom: 0cm">[mschap] Told to do
MS-CHAPv2 for 1085 with NT-Password
</p>
<p class="western" style="margin-bottom: 0cm">[mschap] FAILED: No
NT/LM-Password. Cannot perform authentication.
</p>
<p class="western" style="margin-bottom: 0cm">[mschap] FAILED:
MS-CHAP2-Response is incorrect
</p>
<p class="western" style="margin-bottom: 0cm">++[mschap] returns
reject
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Freeing handler
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns reject
</p>
<p class="western" style="margin-bottom: 0cm">Failed to authenticate
the user.
</p>
<p class="western" style="margin-bottom: 0cm">Login incorrect:
[1085/<via Auth-Type = EAP>] (from client ruckus-controller
port 0 via TLS tunnel)
</p>
<p class="western" style="margin-bottom: 0cm">} # server inner-tunnel
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Got tunneled
reply code 3
</p>
<p class="western" style="margin-bottom: 0cm"> MS-CHAP-Error =
"\006E=691 R=1"
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x04060004
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Got tunneled
reply RADIUS code 3
</p>
<p class="western" style="margin-bottom: 0cm"> MS-CHAP-Error =
"\006E=691 R=1"
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x04060004
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Tunneled
authentication was rejected.
</p>
<p class="western" style="margin-bottom: 0cm">[peap] FAILURE
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns handled
</p>
<p class="western" style="margin-bottom: 0cm">Sending
Access-Challenge of id 184 to 172.23.54.2 port 32784
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0107002b19001703010020712d9a3c89066e09d12514449c4e4e166e62bd3626ba278d1cb473bacd1b31aa
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea328e2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm">Finished request 22.
</p>
<p class="western" style="margin-bottom: 0cm">Going to the next
request
</p>
<p class="western" style="margin-bottom: 0cm">Waking up in 4.9
seconds.
</p>
<p class="western" style="margin-bottom: 0cm">rad_recv:
Access-Request packet from host 172.23.54.2 port 32784, id=185,
length=258
</p>
<p class="western" style="margin-bottom: 0cm"> User-Name = "1085"
</p>
<p class="western" style="margin-bottom: 0cm"> Calling-Station-Id =
"00-1E-64-27-2F-52"
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-IP-Address =
172.23.54.2
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port = 1
</p>
<p class="western" style="margin-bottom: 0cm"> Called-Station-Id =
"68-92-34-91-91-48:UNIFEBE-1X"
</p>
<p class="western" style="margin-bottom: 0cm"> Service-Type =
Framed-User
</p>
<p class="western" style="margin-bottom: 0cm"> Framed-MTU = 1400
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Port-Type =
Wireless-802.11
</p>
<p class="western" style="margin-bottom: 0cm"> NAS-Identifier =
"68-92-34-91-91-48"
</p>
<p class="western" style="margin-bottom: 0cm"> Connect-Info =
"CONNECT 802.11b/g"
</p>
<p class="western" style="margin-bottom: 0cm"> WISPr-Location-Name =
"2o-Andar"
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x0207002b190017030100205bce9ac93410e019700dbd986065e5a9a84301906e4611ad246471a284fc7e81
</p>
<p class="western" style="margin-bottom: 0cm"> State =
0xa52ffbdea328e2a3ddda2e08b2ef9a8e
</p>
<p class="western" style="margin-bottom: 0cm"> Vendor-25053-Attr-3 =
0x554e49464542452d3158
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x71c3a73b038b1f0a51e530baba2afc96
</p>
<p class="western" style="margin-bottom: 0cm"># Executing section
authorize from file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authorize {...}
</p>
<p class="western" style="margin-bottom: 0cm">++[preprocess] returns
ok
</p>
<p class="western" style="margin-bottom: 0cm">++[chap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[mschap] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">++[digest] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No '@' in
User-Name = "1085", looking up realm NULL
</p>
<p class="western" style="margin-bottom: 0cm">[suffix] No such realm
"NULL"
</p>
<p class="western" style="margin-bottom: 0cm">++[suffix] returns noop
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP packet type
response id 7 length 43
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Continuing tunnel
setup.
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns ok
</p>
<p class="western" style="margin-bottom: 0cm">Found Auth-Type = EAP
</p>
<p class="western" style="margin-bottom: 0cm"># Executing group from
file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
authenticate {...}
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Request found,
released from the list
</p>
<p class="western" style="margin-bottom: 0cm">[eap] EAP/peap
</p>
<p class="western" style="margin-bottom: 0cm">[eap] processing type
peap
</p>
<p class="western" style="margin-bottom: 0cm">[peap] processing
EAP-TLS
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_verify
returned 7
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Done initial
handshake
</p>
<p class="western" style="margin-bottom: 0cm">[peap] eaptls_process
returned 7
</p>
<p class="western" style="margin-bottom: 0cm">[peap] EAPTLS_OK
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Session
established. Decoding tunneled attributes.
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Peap state send
tlv failure
</p>
<p class="western" style="margin-bottom: 0cm">[peap] Received EAP-TLV
response.
</p>
<p class="western" style="margin-bottom: 0cm">[peap] The users
session was previously rejected: returning reject (again.)
</p>
<p class="western" style="margin-bottom: 0cm">[peap] *** This means
you need to read the PREVIOUS messages in the debug output
</p>
<p class="western" style="margin-bottom: 0cm">[peap] *** to find out
the reason why the user was rejected.
</p>
<p class="western" style="margin-bottom: 0cm">[peap] *** Look for
"reject" or "fail". Those earlier messages will
tell you.
</p>
<p class="western" style="margin-bottom: 0cm">[peap] *** what went
wrong, and how to fix the problem.
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Handler failed in
EAP/peap
</p>
<p class="western" style="margin-bottom: 0cm">[eap] Failed in EAP
select
</p>
<p class="western" style="margin-bottom: 0cm">++[eap] returns invalid
</p>
<p class="western" style="margin-bottom: 0cm">Failed to authenticate
the user.
</p>
<p class="western" style="margin-bottom: 0cm">Login incorrect:
[1085/<via Auth-Type = EAP>] (from client ruckus-controller
port 1 cli 00-1E-64-27-2F-52)
</p>
<p class="western" style="margin-bottom: 0cm">Using Post-Auth-Type
Reject
</p>
<p class="western" style="margin-bottom: 0cm"># Executing group from
file /etc/freeradius/sites-enabled/default
</p>
<p class="western" style="margin-bottom: 0cm">+- entering group
REJECT {...}
</p>
<p class="western" style="margin-bottom: 0cm">[attr_filter.access_reject]
expand: %{User-Name} -> 1085
</p>
<p class="western" style="margin-bottom: 0cm"> attr_filter: Matched
entry DEFAULT at line 11
</p>
<p class="western" style="margin-bottom: 0cm">++[attr_filter.access_reject]
returns updated
</p>
<p class="western" style="margin-bottom: 0cm">Delaying reject of
request 23 for 1 seconds
</p>
<p class="western" style="margin-bottom: 0cm">Going to the next
request
</p>
<p class="western" style="margin-bottom: 0cm">Waking up in 0.9
seconds.
</p>
<p class="western" style="margin-bottom: 0cm">Sending delayed reject
for request 23
</p>
<p class="western" style="margin-bottom: 0cm">Sending Access-Reject
of id 185 to 172.23.54.2 port 32784
</p>
<p class="western" style="margin-bottom: 0cm"> EAP-Message =
0x04070004
</p>
<p class="western" style="margin-bottom: 0cm"> Message-Authenticator
= 0x00000000000000000000000000000000
</p>
<p class="western" style="margin-bottom: 0cm">Waking up in 3.9
seconds.
</p>
<p class="western" style="margin-bottom: 0cm">Cleaning up request 16
ID 178 with timestamp +2309
</p>
<p class="western" style="margin-bottom: 0cm">Cleaning up request 17
ID 179 with timestamp +2309
</p>
<p class="western" style="margin-bottom: 0cm">Cleaning up request 18
ID 180 with timestamp +2309
</p>
<p class="western" style="margin-bottom: 0cm">Cleaning up request 19
ID 181 with timestamp +2309
</p>
<p class="western" style="margin-bottom: 0cm">Cleaning up request 20
ID 182 with timestamp +2309
</p>
<p class="western" style="margin-bottom: 0cm">Cleaning up request 21
ID 183 with timestamp +2309
</p>
<p class="western" style="margin-bottom: 0cm">Cleaning up request 22
ID 184 with timestamp +2309
</p>
<p class="western" style="margin-bottom: 0cm">Waking up in 1.0
seconds.
</p>
<p class="western" style="margin-bottom: 0cm">Cleaning up request 23
ID 185 with timestamp +2309
</p>
<p class="western" style="margin-bottom: 0cm">Ready to process
requests. </p></div><div><br></div><div><span style="font-size: 10pt;"><br></span></div> </div></body>
</html>