October 2014 - Freeradius-Users - lists.freeradius.org

EAP-TLS error message
by Ben Tucker 21 Oct '14

21 Oct '14

New Freeradius user here. I am setting up a ported version of Freeradius to work on Windows, which is version 1.1.7-r0.0.2 (I realize this is old but unsure how to port over a newer version to windows). No unix/linux server is available to me to do the testing I need done right now. Below is the debug output when trying to start freeradius. it is getting hung up under the EAP section. Any assistance would be greatly appreciated. Please let me know if you need any other information to assist! Thanks Starting - reading configuration files ...reread_config: reading radiusd.confConfig: including file: ../etc/raddb/proxy.confConfig: including file: ../etc/raddb/clients.confConfig: including file: ../etc/raddb/snmp.confConfig: including file: ../etc/raddb/eap.confConfig: including file: ../etc/raddb/sql.conf main: prefix = ".." main: localstatedir = "../var" main: logdir = "../var/log/radius" main: libdir = "../lib" main: radacctdir = "../var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = yes main: log_file = "../var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = yes main: pidfile = "../var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "../bin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0read_config_files: reading dictionaryread_config_files: reading naslistUsing deprecated naslist file. Support for this will go away soon.read_config_files: reading clientsread_config_files: reading realmsradiusd: entering modules setupModule: Library search path is ../libModule: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)"rlm_exec: Wait=yes but no output defined. Did you mean output=none?Module: Instantiated exec (exec)Module: Loaded exprModule: Instantiated expr (expr)Module: Loaded PAP pap: encryption_scheme = "crypt" pap: auto_header = noModule: Instantiated pap (pap)Module: Loaded CHAPModule: Instantiated chap (chap)Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)"Module: Instantiated mschap (mschap)Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "../var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600Module: Instantiated unix (unix)Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = norlm_eap: Loaded and initialized type md5rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP"rlm_eap: Loaded and initialized type gtc tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "../etc/raddb/certs/FreeRADIUS.net/DemoCerts/radius-srv-pri-key.pem" tls: certificate_file = "../etc/raddb/certs/FreeRADIUS.net/DemoCerts/radius-srv-pri-cert.pem" tls: CA_file = "../etc/raddb/certs/FreeRADIUS.net/DemoCerts/cacert.pem" tls: private_key_password = "mercury" tls: dh_file = "../etc/raddb/certs/FreeRADIUS.net/DemoCerts/dh" tls: random_file = "../etc/raddb/certs/FreeRADIUS.net/DemoCerts/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "%{User-Name}" tls: cipher_list = "(null)" tls: check_cert_issuer = "(null)"rlm_eap_tls: Loading the certificate file as a chainrlm_eap: SSL error error:06074079:digital envelope routines:EVP_PBE_CipherInit:unknown pbe algorithmrlm_eap_tls: Error reading private key filerlm_eap: Failed to initialize type tls

2 2

Arbitrary attributes for dynamic clients
by Arran Cudbard-Bell 20 Oct '14

20 Oct '14

In latest v3.0.x HEAD the server will now process all attributes in the control list when creating dynamic clients. Attributes that are not consumed filling in the fields of the client, will be added as config items which can be accessed using the "%{client:}" xlat. For example: (0) # Executing section authorize from file /usr/local/freeradius/etc/raddb/sites-enabled/dynamic-clients (0) authorize { (0) update control { (0) &FreeRADIUS-Client-IP-Prefix = 127.0.0.0/8 (0) &FreeRADIUS-Client-Require-MA = no (0) &FreeRADIUS-Client-Secret = 'testing123' (0) EXPAND %{Packet-Src-IP-Address} (0) --> 127.0.0.1 (0) &FreeRADIUS-Client-Shortname = "127.0.0.1" (0) &Tmp-String-0 = 'foooooo' (0) } # update control = noop (0) [ok] = ok (0) } # authorize = ok } # server dynamic_clients (0) Converting control list to client fields (0) ipaddr = 127.0.0.0/8 (0) require_message_authenticator = no (0) secret = 'testing123' (0) shortname = '127.0.0.1' (0) Tmp-String-0 = 'foooooo' Adding client 127.0.0.0/8 with shared secret "testing123" (0) EXPAND %{client:Tmp-String-0} (0) --> foooooo (0) Tmp-String-1 := "foooooo" This allows easy caching of any information related to the NAS, such as its capabilities and any information required for policy decisions. -Arran Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

1 2

Poodle and EAP?
by Stefan Winter 20 Oct '14

20 Oct '14

Hi, catching up after being out of office when "Poodle" arrived. I'm wondering if FreeRADIUS is strictly enforcing TLS 1.0+ when negotiating a PEAP/TTLS tunnel. And if not, how to make it so :-) Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

5 7

radius server stopped receiving request
by Khapare Joshi 20 Oct '14

20 Oct '14

Hi, I have two freeradius server. Both of them were working well until. But one the server stopped receiving auth request. I stopped the radius server and run in debug mode, radiusd -X then all I get is below: Request are coming but looks it is expanding the detail file then sends the Sending Accounting-Response of id 26 to 192.168.1.1 port 32770 and nothing else. How do I fix this so my second server start processing users request and authenticate them :? # Executing section preacct from file /etc/raddb/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok expand: %{Acct-Session-Time} -> 8 expand: %{Acct-Delay-Time} -> 0 expand: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0} -> 1413805547 - 8 - 0 expand: %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}} -> 1413805539 ++[request] returns ok [acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 192.168.1.1,NAS-IP-Address = 192.168.1.1,Acct-Session-Id = "5444f5e2/dc:86:d8:23:03:0d/290270",User-Name = "carpæ"' [acct_unique] Acct-Unique-Session-ID = "f1f7ece2e5e57147". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "carlol", looking up realm NULL [suffix] Found realm "NULL" [suffix] Adding Stripped-User-Name = "carol" [suffix] Adding Realm = "NULL" [suffix] Accounting realm is LOCAL. ++[suffix] returns ok [files] acct_users: Matched entry DEFAULT at line 22 [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Framed-IP-Address:-%{NAS-IP-Address}} -> 192.168.5.2 ++[files] returns ok # Executing section accounting from file /etc/raddb/sites-enabled/default +- entering group accounting {...} [detail] expand: %{Packet-Src-IP-Address} -> 192.168.1.1 [detail] expand: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/radius/radacct/192.168.1.1/detail-20141020 [detail] /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radius/radacct/192.168.1.1/detail-20141020 [detail] expand: %t -> Mon Oct 20 11:45:47 2014 ++[detail] returns ok [attr_filter.accounting_response] expand: %{User-Name} -> carol attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 26 to 192.168.1.1 port 32770 Finished request 62. Cleaning up request 62 ID 26 with timestamp +5 Going to the next request Ready to process requests. rad_recv: Accounting-Request packet from host 192.168.1.1 port 32770, id=27, length=264 User-Name = "jebish" NAS-Port = 1 NAS-IP-Address = 192.168.1.1 Framed-IP-Address = 192.168.5.9 NAS-Identifier = "hinet-wlc00-hbio" Airespace-Wlan-Id = 300 Acct-Session-Id = "5444f5ca/88:1f:a1:1b:f8:44/290236" NAS-Port-Type = Wireless-802.11 Cisco-AVPair = "audit-session-id=82d0a5f800051d5a5444f5c7" Acct-Authentic = RADIUS Event-Timestamp = "Oct 20 2014 11:45:47 GMT" Acct-Status-Type = Interim-Update Acct-Input-Octets = 41102 Acct-Input-Gigawords = 0 Acct-Output-Octets = 55255 Acct-Output-Gigawords = 0 Acct-Input-Packets = 213 Acct-Output-Packets = 191 Acct-Session-Time = 32 Acct-Delay-Time = 0 Calling-Station-Id = "192.168.2.71" Called-Station-Id = "192.168.1.1" # Executing section preacct from file /etc/raddb/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok expand: %{Acct-Session-Time} -> 32 expand: %{Acct-Delay-Time} -> 0 expand: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0} -> 1413805547 - 32 - 0 expand: %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}} -> 1413805515 ++[request] returns ok [acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 192.168.1.1,NAS-IP-Address = 192.168.1.1,Acct-Session-Id = "5444f5ca/88:1f:a1:1b:f8:44/290236",User-Name = "jebish"' [acct_unique] Acct-Unique-Session-ID = "ae16dee06152c99c". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "jebish", looking up realm NULL [suffix] Found realm "NULL" [suffix] Adding Stripped-User-Name = "jebish" [suffix] Adding Realm = "NULL" [suffix] Accounting realm is LOCAL. ++[suffix] returns ok [files] acct_users: Matched entry DEFAULT at line 22 [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Framed-IP-Address:-%{NAS-IP-Address}} -> 192.168.3.74 ++[files] returns ok # Executing section accounting from file /etc/raddb/sites-enabled/default +- entering group accounting {...} [detail] expand: %{Packet-Src-IP-Address} -> 192.168.1.1 [detail] expand: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/radius/radacct/192.168.1.1/detail-20141020 [detail] /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radius/radacct/192.168.1.1/detail-20141020 [detail] expand: %t -> Mon Oct 20 11:45:47 2014 ++[detail] returns ok [attr_filter.accounting_response] expand: %{User-Name} -> jenny attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 27 to 192.168.1.1 port 32770 Finished request 63. Cleaning up request 63 ID 27 with timestamp +5 Going to the next request Ready to process requests

2 2

RFC5607 support on Freeradius
by Frank Wei 20 Oct '14

20 Oct '14

Hi all, Does anybody know if RFC5607 is supported by Freeradius ? We need the new attributes "Framed-Management-Protocol"," Management-Transport-Protection", "Management-Policy-Id" and "Management-Privilege-Level" support. Also does the "Freeradius client (version1.1.6) supports those new attributes? If not is that easy to add them? Best Regards, The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it).

3 4

IP address allocation based on certificate attributes
by janet long 18 Oct '14

18 Oct '14

My use case is using EAP-TLS, and clients authenticating using X509 certificates. I know that certificate authentication is bread and butter for Radius, but I have a more granular requirement. The user certificates are setup according to different countries, and cities etc where the users are based, e.g. within the Subject field is an attribute C=GB or C=US etc. I need to be able to allocate US users to one range of IP addresses, and UK users to another range of IP addresses - based solely on those attributes. Is this possible? Can it be done in configuration, or would it require coding? Many thanks Janet

2 2

LDAP - bind as user - howto?
by Matej Žerovnik 18 Oct '14

18 Oct '14

Hey! I'm having troubles setting authentication over LDAP in 'bind as user' mode. I only want to authenticate user against LDAP(ldap bind with user/pass provided by the user) and if login is successful, then radius returns Access-Accept. I'm using radius 2.1.12. In modules/ldap I have the following: server = "ldaps.example.com" port = "636" basedn = "dc=example,dc=com" filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})" ldap_connections_number = 5 timeout = 4 timelimit = 3 net_timeout = 1 password_attribute = userPassword set_auth_type = yes In sites-available/defaults I have: authorize { preprocess } authenticate { Auth-Type LDAP { ldap } } The rest of the modules are empty. In hints file I have: DEFAULT Ldap-UserDN := "uid=%{User-Name},ou=test,dc=example,dc=com", Auth-Type := LDAP When I try to login, the login fails... In debug log I see the following: # Executing section authorize from file /etc/raddb/sites-enabled/default +- entering group authorize {...} [preprocess] hints: Matched DEFAULT at 36 ++[preprocess] returns ok ++[files] returns noop ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Using Post-Auth-Type Reject I guess it matches the hint, but it doesn't try to bind to ldap. If I put DEFAULT Ldap-UserDN := "uid=testuser,ou=test,dc=example,dc=com", Auth-Type := LDAP in users file and uncomment files in authorize section, login is successfu. How do I make radius use template provided in hints file and pass it on to authenticate modul, so it tries to login to ldap? Is this even the right way of doing it? I didn't find many posts, that tried to do that. Everybody usually search ldap for USERDN attribute in authorize section with ldap module. Thanks, Matej -- --- Matej Zerovnik

4 9

Re: Beginner help
by KAVYA PRABHAKAR 16 Oct '14

16 Oct '14

Hi, Thanks for the reply. I am using freeradius v3.0.3 Now TLS connection is established. I get following error after 29.4seconds and sockets will be closed. waking up in 29.4 seconds. Reached idle timeout on socket auth from client (10.253.6.11, 1645) -> (*, 2083, virtual-server=default) ... shutting down socket auth from client (10.253.6.11, 1645) -> (*, 2083, virtual-server=default) Waking up in 2.9 seconds. ... cleaning up socket auth from client (10.253.6.11, 1645) -> (*, 2083, virtual-server=default) I have changed idle_timeout period to 0 from 30.(in tls and default file) According to my understanding 0 means infinite. So sockets and connection has to be up for infinite amount of time. Please Correct me if I am wrong! When server gets a radius request it will go and check in client.conf and I have the entry there as well. Users file also has username and password information. If I send radius request I get password incorrect error. Should I modify any other files along with this. Thanks, Kavya

1 0

Re: Freeradius-Users Digest, Vol 114, Issue 50
by KAVYA PRABHAKAR 16 Oct '14

16 Oct '14

Hi, Thanks for the reply. Now TLS connection is established. I get following error after 33seconds and sockets will be closed. waking up in 29.4 seconds. Reached idle timeout on socket auth from client (10.253.6.11, 1645) -> (*, 2083, virtual-server=default) ... shutting down socket auth from client (10.253.6.11, 1645) -> (*, 2083, virtual-server=default) Waking up in 2.9 seconds. ... cleaning up socket auth from client (10.253.6.11, 1645) -> (*, 2083, virtual-server=default) I have changed idle_timeout period to 0 from 30.(in tls and default file) According to my understanding 0 means infinite. So sockets and conenction has to be up for infinite amount of time. Please Correct me if I am wrong! Thanks, Kavya On Thu, Oct 16, 2014 at 3:30 PM, < freeradius-users-request(a)lists.freeradius.org> wrote: > Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > > You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. Re: Beginner help (A.L.M.Buxey(a)lboro.ac.uk) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 16 Oct 2014 08:48:30 +0000 > From: A.L.M.Buxey(a)lboro.ac.uk > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Subject: Re: Beginner help > Message-ID: <20141016084830.GA25352(a)lboro.ac.uk> > Content-Type: text/plain; charset=us-ascii > > Hi, > > > I generated .csr using openssl command and used this csr to generate > CA > > signed certificate. I installed this CA signed certificate under > trusted > > root of server. But when I run freeradius in debug mode, I get the > > following error: > > eap.conf (2.x) or mods-enabled/eap files give clear documentation > on the cert files etc required. the FreeRADIUS system comes with fully > documented > information about certificate generation and requirements > > > but your error looks like the client is using the wrong CA when talking to > the RADIUS > server > > please use the history feature of the users mailing list to see exactly > this same issue > talked about many many times over the past years > > alan > > > ------------------------------ > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > End of Freeradius-Users Digest, Vol 114, Issue 50 > ************************************************* >

1 0

IP addresses were not assigned
by Akira Yata 16 Oct '14

16 Oct '14

Hi all! I had a problem with freeradius. When some users were attempting to connect PPPoE session,logiin was OK ,But IP addresses were not assigned(I cnfirmed it on NAS) what is the cause of this problem? NOTE:I have deleted username/password in [] fields. [root@radius maint]# tail -n 100 /var/log/radius/radius.log Fri Oct 10 15:07:00 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:00 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:00 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:00 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:00 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:00 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:00 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 352321536 cli #ERX-310#E15#0) Fri Oct 10 15:07:00 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 352321536 cli #ERX-310#E15#0) Fri Oct 10 15:07:00 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:01 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098854 cli #ERX-310#E16#102) Fri Oct 10 15:07:01 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:01 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:01 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 352321536 cli #ERX-310#E15#0) Fri Oct 10 15:07:02 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:02 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:02 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 369098855, but no Login record Fri Oct 10 15:07:02 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:02 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:02 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 369098854, but no Login record Fri Oct 10 15:07:02 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:03 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:03 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:03 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:03 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:03 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:03 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:04 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:04 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:04 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:05 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 369098855, but no Login record Fri Oct 10 15:07:05 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:05 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:05 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 369098854, but no Login record Fri Oct 10 15:07:05 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:06 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:06 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 352321536 cli #ERX-310#E15#0) Fri Oct 10 15:07:06 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 352321536 cli #ERX-310#E15#0) Fri Oct 10 15:07:06 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:06 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:06 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:06 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:06 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:06 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:06 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:06 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:07 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098854 cli #ERX-310#E16#102) Fri Oct 10 15:07:07 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 352321536 cli #ERX-310#E15#0) Fri Oct 10 15:07:07 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:07 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:07 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:08 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:08 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:08 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 369098854, but no Login record Fri Oct 10 15:07:08 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:09 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:09 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:09 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:09 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:09 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:09 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:09 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:10 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:10 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:10 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:10 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:11 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:11 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098855 cli #ERX-310#E16#103) Fri Oct 10 15:07:11 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 369098854, but no Login record Fri Oct 10 15:07:11 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:11 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098854 cli #ERX-310#E16#102) Fri Oct 10 15:07:12 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:12 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:12 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:12 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:12 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:12 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:12 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098854 cli #ERX-310#E16#102) Fri Oct 10 15:07:12 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:13 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:13 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:13 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:13 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 369098854, but no Login record Fri Oct 10 15:07:13 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:13 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:13 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:15 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:15 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:15 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:15 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:15 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:15 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:15 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:15 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:15 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 352321536 cli #ERX-310#E15#0) Fri Oct 10 15:07:16 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098854 cli #ERX-310#E16#102) Fri Oct 10 15:07:16 2014 : Auth: Login OK: [] (from client 10.0.5.200 port 369098752 cli #ERX-310#E16#0) Fri Oct 10 15:07:16 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Fri Oct 10 15:07:16 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 369098854, but no Login record Fri Oct 10 15:07:16 2014 : Error: rlm_radutmp: Logout for NAS 10.0.5.200 port 352321536, but no Login record Fri Oct 10 15:07:16 2014 : Error: rlm_radutmp: Logout entry for NAS 10.0.5.200 port 369098752 has wrong ID Thanks and Regards

2 1