<div dir="ltr">Hello, here request 46, i don`t know where is the problem.<div><br></div><div>Is it possible the problem were on the access point?<br><div><div><br></div><div style>Thank you</div><div><br></div><div><br></div>
<div><br></div><div>Going to the next request</div><div>Waking up in 0.4 seconds.</div><div>rad_recv: Access-Request packet from host 192.168.202.252 port 46850, id=223, length=182</div><div> User-Name = "clemente.blanch"</div>
<div> NAS-IP-Address = 192.168.202.252</div><div> NAS-Port = 2049</div><div> Called-Station-Id = "00-90-0B-23-2E-BF:Escuelas-Radius"</div><div> Calling-Station-Id = "4C-ED-DE-2C-9C-B2"</div>
<div> Framed-MTU = 1250</div><div> NAS-Port-Type = Wireless-802.11</div><div> Framed-Compression = None</div><div> Connect-Info = "CONNECT 802.11g"</div><div> EAP-Message = 0x020500061500</div>
<div> State = 0x4e024d7b4d0758f10683e8b8e5ce125e</div><div> Message-Authenticator = 0x5adf1c83c912ef741d7687fe7de9b226</div><div># Executing section authorize from file /etc/raddb/sites-enabled/default</div>
<div>+- entering group authorize {...}</div><div>++[preprocess] returns ok</div><div>++[chap] returns noop</div><div>++[mschap] returns noop</div><div>++[digest] returns noop</div><div>[suffix] No '@' in User-Name = "clemente.blanch", looking up realm NULL</div>
<div>[suffix] No such realm "NULL"</div><div>++[suffix] returns noop</div><div>[eap] EAP packet type response id 5 length 6</div><div>[eap] Continuing tunnel setup.</div><div>++[eap] returns ok</div><div>Found Auth-Type = EAP</div>
<div># Executing group from file /etc/raddb/sites-enabled/default</div><div>+- entering group authenticate {...}</div><div>[eap] Request found, released from the list</div><div>[eap] EAP/ttls</div><div>[eap] processing type ttls</div>
</div><div>[ttls] Authenticate<br></div><div><div>[ttls] processing EAP-TLS</div><div>[ttls] Received TLS ACK</div><div>[ttls] ACK handshake fragment handler</div><div>[ttls] eaptls_verify returned 1</div><div>[ttls] eaptls_process returned 13</div>
<div>++[eap] returns handled</div><div>Sending Access-Challenge of id 223 to 192.168.202.252 port 46850</div><div> EAP-Message = 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</div>
<div> EAP-Message = 0x46c6abbb9815f5bf03ad5a34549689eee38f0f8749b669788158ed02c99bddc031a069aa78ad6ef473f1cc2e5dc016c2f9538ae1e24f83badf9e788b0001020080b560679c6fc4418267e58e17becc0f688a586adc71902f17c206a8065c780e2fe36e220da345feb93855c4f2a6d600c73745ea7e69075b8285945a001cf174f8da462a39a504428e9077e72c8d65b43c45f7d8ba6c8ce4b5938ba58be88496cc0d6e078e17fb53e039ae538da3b6a89ef4e9f0cc0a8837d83d35961911de34fb0100d3bfd22703553e937e1e38d0f3fe1e67b78be4d1324561938bb05242ba3733a267cef6fd3b3db42fc29f030e17419eadb95b9411fda589cfcbc4</div>
<div> EAP-Message = 0x3b33f495f8363f05f8ed10fc5d826838c45f846c5e7145dfb8753840c2489a6f12a2b71e00d94849a9743304595ac5a586384f0b0342e7fea8e83f2bf738c5e2ce76c213e7fd879f0c85e551e45f48381f22e48b935436a4600e7024caf024dde1b89e9c5c83f6420a755b01a6a9ac0df1b458f8e89da242d6abaf734eaa6d5fc7d62597f45fa88eef3cd20c402f162d5cf36068f7c3660669dc871a39f675661ce01232becc1af56f1076b6fcb4bbd9fddc60e284e1359b9102eb41bb63d67d313ca6a6fa6016030100040e000000</div>
<div> Message-Authenticator = 0x00000000000000000000000000000000</div><div> State = 0x4e024d7b4a0458f10683e8b8e5ce125e</div><div>Finished request 46.</div><div>Going to the next request</div><div>Waking up in 0.4 seconds.</div>
<div>rad_recv: Access-Request packet from host 192.168.202.252 port 46850, id=224, length=380</div><div> User-Name = "clemente.blanch"</div><div> NAS-IP-Address = 192.168.202.252</div><div> NAS-Port = 2049</div>
<div> Called-Station-Id = "00-90-0B-23-2E-BF:Escuelas-Radius"</div><div> Calling-Station-Id = "4C-ED-DE-2C-9C-B2"</div><div> Framed-MTU = 1250</div><div> NAS-Port-Type = Wireless-802.11</div>
<div> Framed-Compression = None</div><div> Connect-Info = "CONNECT 802.11g"</div><div> EAP-Message = 0x020600cc15001603010086100000820080ef5a474eba5c6b6611cebaf4ba980236d5b7e38ddc6ac3cad1dfeeef9fca0149e7d04c559eae7a8ffd5774074661824a8daa5dc80e7139926ca32017223a67eb374bdacac5f215b47a1c410712e795751ecf35ebef68bc203079928490d2c4f7880d39e7a50be95b0784f405b031376584d8f6ce571b7d5ee7d6b66af90584611403010001011603010030109250d45ec686c1201d06799ab9a2545a16714723963f3f1978ea17ac0f6ebf000bf4961cb1e86765a1a347b2ab2147</div>
<div> State = 0x4e024d7b4a0458f10683e8b8e5ce125e</div><div> Message-Authenticator = 0x8c6e9a915c23118f9b3fa95af7c596f9</div></div><div><div># Executing section authorize from file /etc/raddb/sites-enabled/default</div>
<div>+- entering group authorize {...}</div><div>++[preprocess] returns ok</div><div>++[chap] returns noop</div><div>++[mschap] returns noop</div><div>++[digest] returns noop</div><div>[suffix] No '@' in User-Name = "clemente.blanch", looking up realm NULL</div>
<div>[suffix] No such realm "NULL"</div><div>++[suffix] returns noop</div><div>[eap] EAP packet type response id 7 length 192</div><div>[eap] Continuing tunnel setup.</div><div>++[eap] returns ok</div><div>Found Auth-Type = EAP</div>
<div># Executing group from file /etc/raddb/sites-enabled/default</div><div>+- entering group authenticate {...}</div><div>[eap] Request found, released from the list</div><div>[eap] EAP/ttls</div><div>[eap] processing type ttls</div>
<div>[ttls] Authenticate</div><div>[ttls] processing EAP-TLS</div><div>[ttls] eaptls_verify returned 7</div><div>[ttls] Done initial handshake</div><div>[ttls] eaptls_process returned 7</div><div>[ttls] Session established. Proceeding to decode tunneled attributes.</div>
<div>[ttls] Got tunneled request</div><div> User-Name = "clemente.blanch"</div><div> MS-CHAP-Challenge = 0xb3c40922186ffd0242e48ab5e4236d74</div><div> MS-CHAP2-Response = 0xf5006784de2648c7ba1f7605053cd7d6bc6d0000000000000000d4e98791848669280eeffe69a579e683618ca0dcf0e4e87e</div>
<div> FreeRADIUS-Proxied-To = 127.0.0.1</div><div>[ttls] Sending tunneled request</div><div> User-Name = "clemente.blanch"</div><div> MS-CHAP-Challenge = 0xb3c40922186ffd0242e48ab5e4236d74</div>
<div> MS-CHAP2-Response = 0xf5006784de2648c7ba1f7605053cd7d6bc6d0000000000000000d4e98791848669280eeffe69a579e683618ca0dcf0e4e87e</div><div> FreeRADIUS-Proxied-To = 127.0.0.1</div><div>server inner-tunnel {</div>
<div># Executing section authorize from file /etc/raddb/sites-enabled/inner-tunnel</div><div>+- entering group authorize {...}</div><div>++[chap] returns noop</div><div>[mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap'</div>
<div>++[mschap] returns ok</div></div><div><span style="font-family:arial,sans-serif">[suffix] No '@' in User-Name = "clemente.blanch", looking up realm NULL</span><br></div><div><div><font face="arial, sans-serif">[suffix] No such realm "NULL"</font></div>
<div><font face="arial, sans-serif">++[suffix] returns noop</font></div><div><font face="arial, sans-serif">++[control] returns noop</font></div><div><font face="arial, sans-serif">[eap] No EAP-Message, not doing EAP</font></div>
<div><font face="arial, sans-serif">++[eap] returns noop</font></div><div><font face="arial, sans-serif">++[files] returns noop</font></div><div><font face="arial, sans-serif">++[expiration] returns noop</font></div><div>
<font face="arial, sans-serif">++[logintime] returns noop</font></div><div><font face="arial, sans-serif">++[pap] returns noop</font></div><div><font face="arial, sans-serif">Found Auth-Type = MSCHAP</font></div><div><font face="arial, sans-serif"># Executing group from file /etc/raddb/sites-enabled/inner-tunnel</font></div>
<div><font face="arial, sans-serif">+- entering group MS-CHAP {...}</font></div><div><font face="arial, sans-serif">[mschap] No Cleartext-Password configured. Cannot create LM-Password.</font></div><div><font face="arial, sans-serif">[mschap] No Cleartext-Password configured. Cannot create NT-Password.</font></div>
<div><font face="arial, sans-serif">[mschap] Creating challenge hash with username: clemente.blanch</font></div><div><font face="arial, sans-serif">[mschap] Told to do MS-CHAPv2 for clemente.blanch with NT-Password</font></div>
<div><font face="arial, sans-serif">[mschap] FAILED: No NT/LM-Password. Cannot perform authentication.</font></div><div><font face="arial, sans-serif">[mschap] FAILED: MS-CHAP2-Response is incorrect</font></div><div><font face="arial, sans-serif">++[mschap] returns reject</font></div>
<div><font face="arial, sans-serif">Failed to authenticate the user.</font></div><div><font face="arial, sans-serif">} # server inner-tunnel</font></div><div><font face="arial, sans-serif">[ttls] Got tunneled reply code 3</font></div>
<div><font face="arial, sans-serif"> MS-CHAP-Error = "\365E=691 R=1"</font></div><div><font face="arial, sans-serif">[ttls] Got tunneled Access-Reject</font></div><div><font face="arial, sans-serif">[eap] Handler failed in EAP/ttls</font></div>
<div><font face="arial, sans-serif">[eap] Failed in EAP select</font></div><div><font face="arial, sans-serif">++[eap] returns invalid</font></div><div><font face="arial, sans-serif">Failed to authenticate the user.</font></div>
<div><font face="arial, sans-serif">Using Post-Auth-Type Reject</font></div><div><font face="arial, sans-serif"># Executing group from file /etc/raddb/sites-enabled/default</font></div><div><font face="arial, sans-serif">+- entering group REJECT {...}</font></div>
<div><font face="arial, sans-serif">[attr_filter.access_reject] expand: %{User-Name} -> clemente.blanch</font></div><div><font face="arial, sans-serif">attr_filter: Matched entry DEFAULT at line 11</font></div><div>
<font face="arial, sans-serif">++[attr_filter.access_reject] returns updated</font></div><div><font face="arial, sans-serif">Delaying reject of request 48 for 1 seconds</font></div><div><font face="arial, sans-serif">Going to the next request</font></div>
<div><font face="arial, sans-serif">Waking up in 0.4 seconds.</font></div><div><font face="arial, sans-serif"><br></font></div><div style="font-family:arial,sans-serif;font-size:13px"><br></div></div></div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">2013/6/3 Alan DeKok <span dir="ltr"><<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">Roberto Ortega Ramiro wrote:<br>
> Hi, the changes i have done in FreeRadius configuration:<br>
><br>
> I have read than client and user files are not necesary, the others<br>
> files are:<br>
<br>
</div> Which aren't necessary. We ask for the debug output because we need<br>
it. We *don't* ask for other files. We don't need them.<br>
<br>
...<br>
<div class="im">> Sending Access-Challenge of id 180 to 192.168.202.252 port 46850<br>
> EAP-Message =<br>
> 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<br>
> EAP-Message =<br>
> 0x300f0603550407130845736375656c617331133011060355040a130a45736375656c6173534a3121301f06092a864886f70d01090116127469634065736375656c6173736a2e636f6d312630240603550403131d4578616d706c6520436572746966696361746520417574686f7269747930820122300d06092a864886f70d01010105000382010f003082010a0282010100b4038637d9aaab4bc725afe37405268509a155c83ff93ce77ea1009cc5fd8870c1a9da1d80bfdc7425f6a7487822c3cd67b2ce25def5ea1eb92cb9426151aa1af3545aa0ee144e4e8fecfcad2375da868eb97b0c891b53a7b93fb75599171dded6a8103df106aeb3b8d2ba<br>
> EAP-Message =<br>
> 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<br>
> EAP-Message =<br>
> 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<br>
> EAP-Message = 0x83f82d312c7744ab946edc5e<br>
> Message-Authenticator = 0x00000000000000000000000000000000<br>
> State = 0x4300b9324005ac785bc66cf0b8940050<br>
> Finished request 3.<br>
<br>
</div> Fix the client PC. It is receiving the EAP message, and doing nothing<br>
more with it.<br>
<br>
If you wait for a few more seconds, the server will print out a<br>
WARNING message. That message tells you what the problem is, and how to<br>
fix it.<br>
<span class="HOEnZb"><font color="#888888"><br>
Alan DeKok.<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><span style="font-family:arial;font-size:small">-- </span><br style="font-family:arial;font-size:small"><span style="font-family:arial;font-size:small">Un saludo.</span><br style="font-family:arial;font-size:small">
<span style="font-family:arial;font-size:small">____________________</span><br style="font-family:arial;font-size:small"><br style="font-family:arial;font-size:small"><span style="font-family:arial;font-size:small">Roberto Ortega</span><br style="font-family:arial;font-size:small">
<span style="font-family:arial;font-size:small">Profesor de Informática.</span><br style="font-family:arial;font-size:small"><a href="http://www.proyectoret.es/" style="color:rgb(17,85,204);font-family:arial;font-size:small" target="_blank">http://www.proyectoret.es</a><br style="font-family:arial;font-size:small">
<br style="font-family:arial;font-size:small"><span style="font-family:arial;font-size:small">Escuelas San José Valencia</span><br style="font-family:arial;font-size:small"><span style="font-family:arial;font-size:small">Avd.Cortes Valencianas nº1</span><br style="font-family:arial;font-size:small">
<span style="font-family:arial;font-size:small">46015 Valencia</span><br style="font-family:arial;font-size:small"><span style="font-family:arial;font-size:small">R4600489A</span><br style="font-family:arial;font-size:small">
<span style="font-family:arial;font-size:small">Tf:963499011 ext. 262</span><br style="font-family:arial;font-size:small"><span style="font-family:arial;font-size:small">Fax:963488835</span><br style="font-family:arial;font-size:small">
<a href="http://www.escuelassj.com/" style="color:rgb(17,85,204);font-family:arial;font-size:small" target="_blank">http://www.escuelassj.com</a><br style="font-family:arial;font-size:small"><br style="font-family:arial;font-size:small">
<span style="font-family:arial;font-size:small">No imprimas este correo si no es necesario. Protejamos el medio ambiente.</span><br></div>
</div>