<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.E-mailStijl17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.E-mailStijl18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.E-mailStijl19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="NL" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-GB">Ok first post here. Howdy.. Name is Arjan. Sorry for the long post in advance.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Currently our small school is running a mac osx tiger file/web server with radius slapped onto it.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">As the server is getting old, I’ve been asked to configure a new server. (Dell 720 running Ubuntu 14.10.) Clients are numerous formats (BYOD) but mainly osx and windows machines. Testing virtually at home atm. The Apache,
LDAP and Samba part are fine for me. But freeradius is really tough.. Can use some help.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Trying to get a EAP-TTLS with PAP working, as that was what we had before. Users are supposed to login with their username and password. No user certificates.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Doing a pap or mschap from server terminal is fine, which means the connection to ldap seems to be working. Doing TTLS-PAP from android phone gives errors.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">The mailing list won’t allow me to post my full config and output. (>100KB) so I’ve put it up at a website :<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><a href="http://www.audiodude.nl/ldapconfig.txt">http://www.audiodude.nl/ldapconfig.txt</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Here a few excerpts: <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">radtest -t mschap arjan Mypassword^3 localhost 0 mypassword ends with :<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Ready to process requests.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">rad_recv: Access-Request packet from host 127.0.0.1 port 44458, id=134, length=131<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> User-Name = "arjan"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-IP-Address = 127.0.1.1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Port = 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Message-Authenticator = 0xe851266b3b6672aed5d53caecf5421b9<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> MS-CHAP-Challenge = 0x6e5a7c9078ec9181<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> MS-CHAP-Response = 0x0001000000000000000000000000000000000000000000000000e8c0afd962f70b27eae06ed24a3fd2e53950c029a26de960<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing section authorize from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group authorize {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[preprocess] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[chap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap'<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[mschap] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[digest] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[suffix] No '@' in User-Name = "arjan", looking up realm NULL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[suffix] No such realm "NULL"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[suffix] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] No EAP-Message, not doing EAP<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[eap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[files] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] performing user authorization for arjan<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] expand: %{Stripped-User-Name} -><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] ... expanding second conditional<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] expand: %{User-Name} -> arjan<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=arjan)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] expand: ou=Users,dc=mysite,dc=nl -> ou=Users,dc=mysite,dc=nl<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] ldap_get_conn: Checking Id: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] ldap_get_conn: Got Id: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] attempting LDAP reconnection<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] (re)connect to ldapserv.mysite.nl:389, authentication 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] bind as cn=admin,dc=mysite,dc=nl/Mypassword^3 to ldapserv.mysite.nl:389<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] waiting for bind result ...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] Bind was successful<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] performing search in ou=Users,dc=mysite,dc=nl, with filter (uid=arjan)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] No default NMAS login sequence<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] looking for check items in directory...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] userPassword -> Password-With-Header == "{SSHA}EO6u+XXXXXXXXXXXXXXXXXXX9CVEpL"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] sambaNtPassword -> NT-Password == 0x323444323XXXXXXXXXXXXXXXXXXX136453246<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] sambaLmPassword -> LM-Password == 0x4437314142XXXXXXXXXXXXXXXXXXX7343541363935<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] looking for reply items in directory...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] user arjan authorized to use remote access<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] ldap_release_conn: Release Id: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[ldap] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[expiration] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[logintime] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[pap] Normalizing NT-Password from hex encoding<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[pap] Normalizing LM-Password from hex encoding<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[pap] Normalizing SSHA1-Password from base64 encoding<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[pap] WARNING: Auth-Type already set. Not setting to PAP<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[pap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Found Auth-Type = MSCHAP<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing group from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group MS-CHAP {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[mschap] Found LM-Password<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[mschap] Found NT-Password<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[mschap] Told to do MS-CHAPv1 with NT-Password<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[mschap] adding MS-CHAPv1 MPPE keys<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[mschap] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing section post-auth from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group post-auth {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[exec] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Sending Access-Accept of id 134 to 127.0.0.1 port 44458<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> MS-CHAP-MPPE-Keys = 0xd71ab5a02f21bf6c84ea1619e12e6d233ad6e6fe70164f220000000000000000<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> MS-MPPE-Encryption-Policy = 0x00000001<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> MS-MPPE-Encryption-Types = 0x00000006<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Finished request 0.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">So LDAP seems ok. <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">But doing a EAP-TTLS-PAP produces results below :<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Should I change something in the EAP.conf file ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> ttls {<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> default_eap_type = md5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> copy_request_to_tunnel = no<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> use_tunneled_reply = no<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> virtual_server = "inner-tunnel"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> }<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">THX in advance guys !<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Ready to process requests.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">rad_recv: Access-Request packet from host 192.168.63.144 port 32869, id=0, length=123<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> User-Name = "arjan"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-IP-Address = 192.168.63.144<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Called-Station-Id = "20aa4b81f8a3"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Calling-Station-Id = "64a769fde8c7"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Identifier = "20aa4b81f8a3"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Port = 18<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Framed-MTU = 1400<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Port-Type = Wireless-802.11<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> EAP-Message = 0x0200000a0161726a616e<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Message-Authenticator = 0x2f7a9f1fe7f8586e05b801511990fa64<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing section authorize from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group authorize {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[preprocess] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[chap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[mschap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[digest] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[suffix] No '@' in User-Name = "arjan", looking up realm NULL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[suffix] No such realm "NULL"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[suffix] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] EAP packet type response id 0 length 10<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] No EAP Start, assuming it's an on-going EAP conversation<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[eap] returns updated<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[files] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] performing user authorization for arjan<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] expand: %{Stripped-User-Name} -><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] ... expanding second conditional<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] expand: %{User-Name} -> arjan<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=arjan)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] expand: ou=Users,dc=mysite,dc=nl -> ou=Users,dc=mysite,dc=nl<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] ldap_get_conn: Checking Id: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] ldap_get_conn: Got Id: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] attempting LDAP reconnection<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] (re)connect to ldapserv.mysite.nl:389, authentication 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] bind as cn=admin,dc=mysite,dc=nl/Mypassword^3 to ldapserv.mysite.nl:389<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] waiting for bind result ...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] Bind was successful<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] performing search in ou=Users,dc=mysite,dc=nl, with filter (uid=arjan)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] No default NMAS login sequence<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] looking for check items in directory...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] userPassword -> Password-With-Header == "{SSHA}EO6u+XXXXXXXXXXXXXXXXXXX9CVEpL"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] sambaNtPassword -> NT-Password == 0x323444323XXXXXXXXXXXXXXXXXXX136453246<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] sambaLmPassword -> LM-Password == 0x4437314142XXXXXXXXXXXXXXXXXXX7343541363935<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] looking for reply items in directory...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ldap] user arjan authorized to use remote access<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> [ldap] ldap_release_conn: Release Id: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[ldap] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[expiration] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[logintime] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[pap] Normalizing NT-Password from hex encoding<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[pap] Normalizing LM-Password from hex encoding<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[pap] Normalizing SSHA1-Password from base64 encoding<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[pap] WARNING: Auth-Type already set. Not setting to PAP<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[pap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Found Auth-Type = EAP<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing group from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group authenticate {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] EAP Identity<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] processing type tls<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[tls] Initiate<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[tls] Start returned 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[eap] returns handled<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Sending Access-Challenge of id 0 to 192.168.63.144 port 32869<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> EAP-Message = 0x010100061520<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Message-Authenticator = 0x00000000000000000000000000000000<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> State = 0xb4cfcc79b4ced9bce030871567d52b3d<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Finished request 0.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Going to the next request<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Waking up in 4.9 seconds.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">rad_recv: Access-Request packet from host 192.168.63.144 port 32869, id=0, length=327<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Cleaning up request 0 ID 0 with timestamp +41<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> User-Name = "arjan"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-IP-Address = 192.168.63.144<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Called-Station-Id = "20aa4b81f8a3"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Calling-Station-Id = "64a769fde8c7"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Identifier = "20aa4b81f8a3"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Port = 18<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Framed-MTU = 1400<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> State = 0xb4cfcc79b4ced9bce030871567d52b3d<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Port-Type = Wireless-802.11<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> EAP-Message = 0x020100c4150016030100b9010000b5030154a9bcfe6fc055caad760b07efb122cc8df68813c63eaf12f11c3c770607a803000048c014c00a00390038c00fc0050035c012c00800160013c00dc003000ac013c00900330032c00ec004002fc011c007c00cc002000500040015001200090014001100080006000300ff01000044000b000403000102000a00340032000100020003000400050006000700080009000a000b000c000d000e000f001000110012001300140015001600170018001900230000<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Message-Authenticator = 0xa56f2ecfe109fcdef933ff8083a95981<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing section authorize from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group authorize {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[preprocess] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[chap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[mschap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[digest] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[suffix] No '@' in User-Name = "arjan", looking up realm NULL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[suffix] No such realm "NULL"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[suffix] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] EAP packet type response id 1 length 196<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] Continuing tunnel setup.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[eap] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Found Auth-Type = EAP<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing group from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group authenticate {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] Request found, released from the list<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] EAP/ttls<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] processing type ttls<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] Authenticate<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] processing EAP-TLS<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] eaptls_verify returned 7<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] Done initial handshake<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] (other): before/accept initialization<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] TLS_accept: before/accept initialization<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] <<< TLS 1.0 Handshake [length 00b9], ClientHello<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] TLS_accept: SSLv3 read client hello A<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] >>> TLS 1.0 Handshake [length 0039], ServerHello<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] TLS_accept: SSLv3 write server hello A<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] >>> TLS 1.0 Handshake [length 080c], Certificate<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] TLS_accept: SSLv3 write certificate A<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] >>> TLS 1.0 Handshake [length 014b], ServerKeyExchange<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] TLS_accept: SSLv3 write key exchange A<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] TLS_accept: SSLv3 write server done A<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] TLS_accept: SSLv3 flush data<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] TLS_accept: Need to read more data: SSLv3 read client certificate A<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">In SSL Handshake Phase<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">In SSL Accept mode<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[ttls] eaptls_process returned 13<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[eap] returns handled<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Sending Access-Challenge of id 0 to 192.168.63.144 port 32869<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> EAP-Message = 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<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> EAP-Message = 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<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> EAP-Message = 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<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> EAP-Message = 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<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> EAP-Message = 0xcd9d8cef411761a8d4ef22af<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Message-Authenticator = 0x00000000000000000000000000000000<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> State = 0xb4cfcc79b5cdd9bce030871567d52b3d<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Finished request 1.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Going to the next request<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Waking up in 4.9 seconds.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">rad_recv: Access-Request packet from host 192.168.63.144 port 32869, id=0, length=309<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Cleaning up request 1 ID 0 with timestamp +41<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> User-Name = "arjan"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-IP-Address = 192.168.63.144<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Called-Station-Id = "20aa4b81f8a3"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Calling-Station-Id = "64a769fde8c7"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Identifier = "20aa4b81f8a3"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Port = 18<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Framed-MTU = 1400<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> NAS-Port-Type = Wireless-802.11<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> EAP-Message = 0x020100c4150016030100b9010000b5030154a9bcfe6fc055caad760b07efb122cc8df68813c63eaf12f11c3c770607a803000048c014c00a00390038c00fc0050035c012c00800160013c00dc003000ac013c00900330032c00ec004002fc011c007c00cc002000500040015001200090014001100080006000300ff01000044000b000403000102000a00340032000100020003000400050006000700080009000a000b000c000d000e000f001000110012001300140015001600170018001900230000<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> Message-Authenticator = 0x3e826a011acf3c3c7c4ee12c132df594<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing section authorize from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group authorize {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[preprocess] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[chap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[mschap] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[digest] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[suffix] No '@' in User-Name = "arjan", looking up realm NULL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[suffix] No such realm "NULL"<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[suffix] returns noop<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] EAP packet type response id 1 length 196<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] Continuing tunnel setup.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[eap] returns ok<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Found Auth-Type = EAP<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing group from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group authenticate {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] Either EAP-request timed out OR EAP-response to an unknown EAP-request<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[eap] Failed in handler<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[eap] returns invalid<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Failed to authenticate the user.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Using Post-Auth-Type Reject<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"># Executing group from file /etc/freeradius/sites-enabled/default<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">+- entering group REJECT {...}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">[attr_filter.access_reject] expand: %{User-Name} -> arjan<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">attr_filter: Matched entry DEFAULT at line 11<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">++[attr_filter.access_reject] returns updated<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Delaying reject of request 2 for 1 seconds<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Going to the next request<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Waking up in 0.9 seconds.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Sending delayed reject for request 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Sending Access-Reject of id 0 to 192.168.63.144 port 32869<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
</div>
</body>
</html>