September 2017 - Freeradius-Users - lists.freeradius.org

is there a way to identify the very first ACCESS-REQUEST
by Michael Hocke 16 Mar '18

16 Mar '18

Hi there, I want to improve our logging and want to keep track of authentication attempts that do not complete. I was thinking of logging the very first ACCESS-REQUEST and then later on the result. Is there a good way to identify the very first ACCESS-REQUEST from the client with unlang? Maybe by checking the contents of the session-state list or some such? Any ideas? Thanks! - Michael

4 6

Cisco-AVPair regex
by Kylián Martin 23 Feb '18

23 Feb '18

Hi all, I'm trying to save some of the Cisco-AVPair attributes into sql while acounting. Specifically, I'm interested in the dhcp-options and http-tlv attributes. WLC describes the connected device in these. Unfortunately, Freeradius 3.12 expands these values unregexable way. (With_cisco_vsa_hack = yes in preprocess the result is the same) Correctly expanded is just Cisco-AVPair = "audit-session-id=1ef1a8c000014809cba76859" Policy file: device_regex = '^((dhcp-option=)|(http-tlv=)){1}([\\].{2,5})([\\].{2,5})([\\].{3})([\\].{3})?(.*)' () fill_device_type { if (&Cisco-AVPair) { foreach &Cisco-AVPair { if ("%{Foreach-Variable-0}" =~ /${policy.device_regex}/i) { update request { &Calling-Device += "%{8} " } } } } } Processing: (98) Received Accounting-Request Id 28 from 192.168.241.30:57614 to 172.31.12.101:1813 length 482 (98) User-Name = "martin" (98) NAS-Port = 8 (98) NAS-IP-Address = 192.168.241.30 (98) Framed-IP-Address = 10.252.136.9 (98) Framed-IPv6-Prefix = 2a07:8d84:800:325f::/64 (98) Framed-IPv6-Prefix = 2a07:8d84:800:325f::/64 (98) Framed-IPv6-Prefix = 2a07:8d84:800:325f::/64 (98) Framed-IPv6-Prefix = 2a07:8d84:800:325f::/64 (98) Framed-IPv6-Prefix = 2a07:8d84:800:325f::/64 (98) Framed-IPv6-Prefix = fe80::/64 (98) NAS-Identifier = "d4-wlc5520" (98) Airespace-Wlan-Id = 20 (98) Acct-Session-Id = "5968a7cb/34:ab:37:ed:a2:bb/90671" (98) NAS-Port-Type = Wireless-802.11 (98) Cisco-AVPair = "audit-session-id=1ef1a8c000014809cba76859" (98) Acct-Authentic = RADIUS (98) Tunnel-Type:0 = VLAN (98) Tunnel-Medium-Type:0 = IEEE-802 (98) Tunnel-Private-Group-Id:0 = "595" (98) Event-Timestamp = "Jul 14 2017 14:47:01 CEST" (98) Cisco-AVPair = "dhcp-option=\000\014\000\0056spMK" (98) Cisco-AVPair = "http-tlv=\000\001\000\030iPhone8,2/10.3.2 (14F89)" How to regex these ? (98) Acct-Status-Type = Interim-Update (98) Acct-Input-Octets = 699538 (98) Acct-Input-Gigawords = 0 (98) Acct-Output-Octets = 2957172 (98) Acct-Output-Gigawords = 0 (98) Acct-Input-Packets = 5974 (98) Acct-Output-Packets = 5319 (98) Acct-Session-Time = 5494 (98) Acct-Delay-Time = 0 (98) Calling-Station-Id = "34-ab-37-ed-a2-bb" (98) Called-Station-Id = "d4-air1702-ap-1:UI MK tst" (98) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/default (98) preacct { (98) [preprocess] = ok (98) policy rewrite_called_station_id { (98) if (&Called-Station-Id && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})([^0-9a-f](.+))?$/i)) { (98) if (&Called-Station-Id && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})([^0-9a-f](.+))?$/i)) -> FALSE (98) elsif (&Called-Station-Id && (&Called-Station-Id =~ /^(.+)(:){1}((.+))?$/i)) { (98) elsif (&Called-Station-Id && (&Called-Station-Id =~ /^(.+)(:){1}((.+))?$/i)) -> TRUE (98) elsif (&Called-Station-Id && (&Called-Station-Id =~ /^(.+)(:){1}((.+))?$/i)) { (98) update request { (98) EXPAND %{1} (98) --> d4-air1702-ap-1 (98) &Called-Station-Id := d4-air1702-ap-1 (98) EXPAND %{3} (98) --> UI MK tst (98) &Called-Station-SSID := UI MK tst (98) } # update request = noop (98) [updated] = updated (98) } # elsif (&Called-Station-Id && (&Called-Station-Id =~ /^(.+)(:){1}((.+))?$/i)) = updated (98) ... skipping else: Preceding "if" was taken (98) } # policy rewrite_called_station_id = updated (98) policy fill_device_type { (98) if (&Cisco-AVPair) { (98) if (&Cisco-AVPair) -> TRUE (98) if (&Cisco-AVPair) { (98) foreach &Cisco-AVPair (98) if ("%{Foreach-Variable-0}" =~ /^((dhcp-option=)|(http-tlv=)){1}([\\].{2,5})([\\].{2,5})([\\].{3})([\\].{3})?(.*)/i) { (98) EXPAND Foreach-Variable-0 (98) --> audit-session-id=1ef1a8c000014809cba76859 (98) EXPAND %{Foreach-Variable-0} (98) --> audit-session-id=1ef1a8c000014809cba76859 (98) if ("%{Foreach-Variable-0}" =~ /^((dhcp-option=)|(http-tlv=)){1}([\\].{2,5})([\\].{2,5})([\\].{3})([\\].{3})?(.*)/i) -> FALSE (98) if ("%{Foreach-Variable-0}" =~ /^((dhcp-option=)|(http-tlv=)){1}([\\].{2,5})([\\].{2,5})([\\].{3})([\\].{3})?(.*)/i) { (98) EXPAND Foreach-Variable-0 (98) --> dhcp-option= (98) EXPAND %{Foreach-Variable-0} (98) --> dhcp-option= (98) if ("%{Foreach-Variable-0}" =~ /^((dhcp-option=)|(http-tlv=)){1}([\\].{2,5})([\\].{2,5})([\\].{3})([\\].{3})?(.*)/i) -> FALSE (98) if ("%{Foreach-Variable-0}" =~ /^((dhcp-option=)|(http-tlv=)){1}([\\].{2,5})([\\].{2,5})([\\].{3})([\\].{3})?(.*)/i) { (98) EXPAND Foreach-Variable-0 (98) --> http-tlv= (98) EXPAND %{Foreach-Variable-0} (98) --> http-tlv= Both attributes are expanded till first whitespace char (98) if ("%{Foreach-Variable-0}" =~ /^((dhcp-option=)|(http-tlv=)){1}([\\].{2,5})([\\].{2,5})([\\].{3})([\\].{3})?(.*)/i) -> FALSE (98) } # foreach &Cisco-AVPair = updated (98) } # if (&Cisco-AVPair) = updated How to get text values following whitespaces? I've already tried if ("unescape:%{Foreach-Variable-0}" =~ /${policy.device_regex}/i) with no luck Martin Kylián

4 11

FreeRADIUS 3.0.15 fails to respond with TLS 1.0 (Debian testing)
by Thomas d'Otreppe 25 Oct '17

25 Oct '17

Hi, it looks like FreeRADIUS 3.0.15 doesn't work anymore on Debian testing (with OpenSSL). I tried connecting an Android 6.0 client to FreeRADIUS and from what I understand from the following log, it fails responding to one part of the request because it tries to use TLS 1.0 (eap_peap: ERROR: Failed in __FUNCTION__ (SSL_read): error:1417D102:SSL routines:tls_process_client_hello:unsupported protocol) and AFAIK, TLS 1.0 is not supported anymore in OpenSSL: (0) Received Access-Request Id 37 from 192.168.0.254:46065 to 192.168.0.100:1812 length 139 (0) User-Name = "me" (0) NAS-IP-Address = 192.168.0.254 (0) NAS-Port = 0 (0) Called-Station-Id = "D0-7D-0D-0F-1B-22:MyAP" (0) Calling-Station-Id = "12-34-56-78-90-AB" (0) Framed-MTU = 1400 (0) NAS-Port-Type = Wireless-802.11 (0) Connect-Info = "CONNECT 0Mbps 802.11" (0) EAP-Message = 0x02000007016d65 (0) Message-Authenticator = 0xb909500b8d92f535dd010ce46c878d47 (0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default (0) authorize { (0) policy filter_username { (0) if (&User-Name) { (0) if (&User-Name) -> TRUE (0) if (&User-Name) { (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@[^@]*@/ ) { (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (0) if (&User-Name =~ /\.\./ ) { (0) if (&User-Name =~ /\.\./ ) -> FALSE (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (0) if (&User-Name =~ /\.$/) { (0) if (&User-Name =~ /\.$/) -> FALSE (0) if (&User-Name =~ /(a)\./) { (0) if (&User-Name =~ /(a)\./) -> FALSE (0) } # if (&User-Name) = notfound (0) } # policy filter_username = notfound (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "me", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: Peer sent EAP Response (code 2) ID 0 length 7 (0) eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize (0) [eap] = ok (0) } # authorize = ok (0) Found Auth-Type = eap (0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default (0) authenticate { (0) eap: Peer sent packet with method EAP Identity (1) (0) eap: Calling submodule eap_peap to process data (0) eap_peap: Initiating new EAP-TLS session (0) eap_peap: [eaptls start] = request (0) eap: Sending EAP Request (code 1) ID 1 length 6 (0) eap: EAP session adding &reply:State = 0xf60008ccf601110e (0) [eap] = handled (0) } # authenticate = handled (0) Using Post-Auth-Type Challenge (0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default (0) Challenge { ... } # empty sub-section is ignored (0) Sent Access-Challenge Id 37 from 192.168.0.100:1812 to 192.168.0.254:46065 length 0 (0) EAP-Message = 0x010100061920 (0) Message-Authenticator = 0x00000000000000000000000000000000 (0) State = 0xf60008ccf601110e4d96bfb0034242b4 (0) Finished request Waking up in 4.9 seconds. (1) Received Access-Request Id 38 from 192.168.0.254:46065 to 192.168.0.100:1812 length 260 (1) User-Name = "me" (1) NAS-IP-Address = 192.168.0.254 (1) NAS-Port = 0 (1) Called-Station-Id = "D0-7D-0D-0F-1B-22:MyAP" (1) Calling-Station-Id = "12-34-56-78-90-AB" (1) Framed-MTU = 1400 (1) NAS-Port-Type = Wireless-802.11 (1) Connect-Info = "CONNECT 0Mbps 802.11" (1) EAP-Message = 0x0201006e198000000064160301005f0100005b0301f3660ce76c4adfd99ae7f539e1867cd020b0da3f818c40bf2116c330cdb148c100001cc00ac0140039c009c0130033c007c0110035002f00050004000a00ff0100001600170000000b00020100000a00080006001700180019 (1) State = 0xf60008ccf601110e4d96bfb0034242b4 (1) Message-Authenticator = 0xc2e06b9b63ab56c6fbe401b903304705 (1) session-state: No cached attributes (1) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default (1) authorize { (1) policy filter_username { (1) if (&User-Name) { (1) if (&User-Name) -> TRUE (1) if (&User-Name) { (1) if (&User-Name =~ / /) { (1) if (&User-Name =~ / /) -> FALSE (1) if (&User-Name =~ /@[^@]*@/ ) { (1) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (1) if (&User-Name =~ /\.\./ ) { (1) if (&User-Name =~ /\.\./ ) -> FALSE (1) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (1) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (1) if (&User-Name =~ /\.$/) { (1) if (&User-Name =~ /\.$/) -> FALSE (1) if (&User-Name =~ /(a)\./) { (1) if (&User-Name =~ /(a)\./) -> FALSE (1) } # if (&User-Name) = notfound (1) } # policy filter_username = notfound (1) [preprocess] = ok (1) [chap] = noop (1) [mschap] = noop (1) [digest] = noop (1) suffix: Checking for suffix after "@" (1) suffix: No '@' in User-Name = "me", looking up realm NULL (1) suffix: No such realm "NULL" (1) [suffix] = noop (1) eap: Peer sent EAP Response (code 2) ID 1 length 110 (1) eap: Continuing tunnel setup (1) [eap] = ok (1) } # authorize = ok (1) Found Auth-Type = eap (1) # Executing group from file /usr/local/etc/raddb/sites-enabled/default (1) authenticate { (1) eap: Expiring EAP session with state 0xf60008ccf601110e (1) eap: Finished EAP session with state 0xf60008ccf601110e (1) eap: Previous EAP request found for state 0xf60008ccf601110e, released from the list (1) eap: Peer sent packet with method EAP PEAP (25) (1) eap: Calling submodule eap_peap to process data (1) eap_peap: Continuing EAP-TLS (1) eap_peap: Peer indicated complete TLS record size will be 100 bytes (1) eap_peap: Got complete TLS record (100 bytes) (1) eap_peap: [eaptls verify] = length included (1) eap_peap: (other): before SSL initialization (1) eap_peap: TLS_accept: before SSL initialization (1) eap_peap: TLS_accept: before SSL initialization (1) eap_peap: <<< recv TLS 1.2 [length 005f] (1) eap_peap: >>> send TLS 1.0 Alert [length 0002], fatal protocol_version (1) eap_peap: ERROR: TLS Alert write:fatal:protocol version tls: TLS_accept: Error in error (1) eap_peap: ERROR: Failed in __FUNCTION__ (SSL_read): error:1417D102:SSL routines:tls_process_client_hello:unsupported protocol (1) eap_peap: ERROR: System call (I/O) error (-1) (1) eap_peap: ERROR: TLS receive handshake failed during operation (1) eap_peap: ERROR: [eaptls process] = fail (1) eap: ERROR: Failed continuing EAP PEAP (25) session. EAP sub-module failed (1) eap: Sending EAP Failure (code 4) ID 1 length 4 (1) eap: Failed in EAP select (1) [eap] = invalid (1) } # authenticate = invalid (1) Failed to authenticate the user (1) Using Post-Auth-Type Reject (1) # Executing group from file /usr/local/etc/raddb/sites-enabled/default (1) Post-Auth-Type REJECT { (1) attr_filter.access_reject: EXPAND %{User-Name} (1) attr_filter.access_reject: --> me (1) attr_filter.access_reject: Matched entry DEFAULT at line 11 (1) [attr_filter.access_reject] = updated (1) [eap] = noop (1) policy remove_reply_message_if_eap { (1) if (&reply:EAP-Message && &reply:Reply-Message) { (1) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (1) else { (1) [noop] = noop (1) } # else = noop (1) } # policy remove_reply_message_if_eap = noop (1) } # Post-Auth-Type REJECT = updated (1) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (1) Sending delayed response (1) Sent Access-Reject Id 38 from 192.168.0.100:1812 to 192.168.0.254:46065 length 44 (1) EAP-Message = 0x04010004 (1) Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 3.9 seconds. (0) Cleaning up request packet ID 37 with timestamp +23 (1) Cleaning up request packet ID 38 with timestamp +23 Am I correct? If yes, is there any solution/workaround? Should I open a bug report? I tried to look for forcing TLS 1.2 but it doesn't seem to be an option anywhere (it can be disabled though). Thanks, Thomas

3 5

strange brakes down freeradius
by Anton Kiryushkin 03 Oct '17

03 Oct '17

Hello. I have a strange fall down of the freeradius process version 3.0.15 (last stable version from your site). Do you need additional information about configuration or last auth request? *** Error in `radiusd': free(): invalid pointer: 0x000055f488a9c770 *** ======= Backtrace: ========= /lib64/libc.so.6(+0x721af)[0x7f15c04691af] /lib64/libc.so.6(+0x77706)[0x7f15c046e706] /lib64/libc.so.6(+0x78453)[0x7f15c046f453] /usr/lib64/libtalloc.so.2(+0xa3b4)[0x7f15c122f3b4] /usr/lib64/libtalloc.so.2(+0xa30b)[0x7f15c122f30b] /usr/lib64/libtalloc.so.2(+0xa30b)[0x7f15c122f30b] /usr/lib64/libtalloc.so.2(_talloc_free+0x123)[0x7f15c1228e53] radiusd(+0x3fe19)[0x55f487808e19] radiusd(+0x404b6)[0x55f4878094b6] radiusd(+0x40c69)[0x55f487809c69] radiusd(+0x3fdc2)[0x55f487808dc2] /usr/lib64/freeradius/libfreeradius-radius.so(fr_event_run+0x126)[0x7f15c1d3f8b8] /usr/lib64/freeradius/libfreeradius-radius.so(fr_event_loop+0x4f0)[0x7f15c1d401df] radiusd(radius_event_process+0x26)[0x55f487812f54] radiusd(main+0xc80)[0x55f4877ff261] /lib64/libc.so.6(__libc_start_main+0xf5)[0x7f15c04176e5] radiusd(_start+0x29)[0x55f4877ddb69] ======= Memory map: ======== 55f4877c9000-55f487844000 r-xp 00000000 fe:01 161269 /usr/sbin/radiusd 55f487a43000-55f487a46000 r--p 0007a000 fe:01 161269 /usr/sbin/radiusd 55f487a46000-55f487a4a000 rw-p 0007d000 fe:01 161269 /usr/sbin/radiusd 55f487a4a000-55f487a4c000 rw-p 00000000 00:00 0 55f4886dd000-55f488bf1000 rw-p 00000000 00:00 0 [heap] 7f15b4000000-7f15b4021000 rw-p 00000000 00:00 0 7f15b4021000-7f15b8000000 ---p 00000000 00:00 0 7f15b9fe5000-7f15b9ffb000 r-xp 00000000 fe:01 524378 /lib64/libgcc_s.so.1 7f15b9ffb000-7f15ba1fa000 ---p 00016000 fe:01 524378 /lib64/libgcc_s.so.1 7f15ba1fa000-7f15ba1fb000 r--p 00015000 fe:01 524378 /lib64/libgcc_s.so.1 7f15ba1fb000-7f15ba1fc000 rw-p 00016000 fe:01 524378 /lib64/libgcc_s.so.1 7f15ba1fc000-7f15ba1ff000 r-xp 00000000 fe:01 664654 /usr/lib64/freeradius/rlm_cache_rbtree.so 7f15ba1ff000-7f15ba3fe000 ---p 00003000 fe:01 664654 /usr/lib64/freeradius/rlm_cache_rbtree.so 7f15ba3fe000-7f15ba3ff000 r--p 00002000 fe:01 664654 /usr/lib64/freeradius/rlm_cache_rbtree.so 7f15ba3ff000-7f15ba400000 rw-p 00003000 fe:01 664654 /usr/lib64/freeradius/rlm_cache_rbtree.so 7f15ba400000-7f15ba404000 r-xp 00000000 fe:01 664713 /usr/lib64/freeradius/rlm_eap_mschapv2.so 7f15ba404000-7f15ba603000 ---p 00004000 fe:01 664713 /usr/lib64/freeradius/rlm_eap_mschapv2.so 7f15ba603000-7f15ba604000 r--p 00003000 fe:01 664713 /usr/lib64/freeradius/rlm_eap_mschapv2.so 7f15ba604000-7f15ba605000 rw-p 00004000 fe:01 664713 /usr/lib64/freeradius/rlm_eap_mschapv2.so 7f15ba605000-7f15ba60d000 r-xp 00000000 fe:01 664714 /usr/lib64/freeradius/rlm_eap_peap.so 7f15ba60d000-7f15ba80c000 ---p 00008000 fe:01 664714 /usr/lib64/freeradius/rlm_eap_peap.so 7f15ba80c000-7f15ba80d000 r--p 00007000 fe:01 664714 /usr/lib64/freeradius/rlm_eap_peap.so 7f15ba80d000-7f15ba80e000 rw-p 00008000 fe:01 664714 /usr/lib64/freeradius/rlm_eap_peap.so 7f15ba80e000-7f15ba815000 r-xp 00000000 fe:01 664718 /usr/lib64/freeradius/rlm_eap_ttls.so 7f15ba815000-7f15baa14000 ---p 00007000 fe:01 664718 /usr/lib64/freeradius/rlm_eap_ttls.so 7f15baa14000-7f15baa15000 r--p 00006000 fe:01 664718 /usr/lib64/freeradius/rlm_eap_ttls.so 7f15baa15000-7f15baa16000 rw-p 00007000 fe:01 664718 /usr/lib64/freeradius/rlm_eap_ttls.so 7f15baa16000-7f15baa18000 r-xp 00000000 fe:01 664717 /usr/lib64/freeradius/rlm_eap_tls.so 7f15baa18000-7f15bac17000 ---p 00002000 fe:01 664717 /usr/lib64/freeradius/rlm_eap_tls.so 7f15bac17000-7f15bac18000 r--p 00001000 fe:01 664717 /usr/lib64/freeradius/rlm_eap_tls.so 7f15bac18000-7f15bac19000 rw-p 00002000 fe:01 664717 /usr/lib64/freeradius/rlm_eap_tls.so 7f15bac19000-7f15bac1b000 r-xp 00000000 fe:01 664711 /usr/lib64/freeradius/rlm_eap_gtc.so 7f15bac1b000-7f15bae1a000 ---p 00002000 fe:01 664711 /usr/lib64/freeradius/rlm_eap_gtc.so 7f15bae1a000-7f15bae1b000 r--p 00001000 fe:01 664711 /usr/lib64/freeradius/rlm_eap_gtc.so 7f15bae1b000-7f15bae1c000 rw-p 00002000 fe:01 664711 /usr/lib64/freeradius/rlm_eap_gtc.so 7f15bae1c000-7f15bae21000 r-xp 00000000 fe:01 665154 /usr/lib64/freeradius/rlm_eap_leap.so 7f15bae21000-7f15bb021000 ---p 00005000 fe:01 665154 /usr/lib64/freeradius/rlm_eap_leap.so 7f15bb021000-7f15bb022000 r--p 00005000 fe:01 665154 /usr/lib64/freeradius/rlm_eap_leap.so 7f15bb022000-7f15bb023000 rw-p 00006000 fe:01 665154 /usr/lib64/freeradius/rlm_eap_leap.so 7f15bb023000-7f15bb026000 r-xp 00000000 fe:01 664712 /usr/lib64/freeradius/rlm_eap_md5.so 7f15bb026000-7f15bb225000 ---p 00003000 fe:01 664712 /usr/lib64/freeradius/rlm_eap_md5.so 7f15bb225000-7f15bb226000 r--p 00002000 fe:01 664712 /usr/lib64/freeradius/rlm_eap_md5.so 7f15bb226000-7f15bb227000 rw-p 00003000 fe:01 664712 /usr/lib64/freeradius/rlm_eap_md5.so 7f15bb227000-7f15bb232000 r-xp 00000000 fe:01 524321 /lib64/libnss_files-2.22.so 7f15bb232000-7f15bb431000 ---p 0000b000 fe:01 524321 /lib64/libnss_files-2.22.so 7f15bb431000-7f15bb432000 r--p 0000a000 fe:01 524321 /lib64/libnss_files-2.22.so 7f15bb432000-7f15bb433000 rw-p 0000b000 fe:01 524321 /lib64/libnss_files-2.22.so 7f15bb433000-7f15bb439000 rw-p 00000000 00:00 0 7f15bb439000-7f15bb43c000 r-xp 00000000 fe:01 664652 /usr/lib64/freeradius/rlm_attr_filter.so 7f15bb43c000-7f15bb63b000 ---p 00003000 fe:01 664652 /usr/lib64/freeradius/rlm_attr_filter.so 7f15bb63b000-7f15bb63c000 r--p 00002000 fe:01 664652 /usr/lib64/freeradius/rlm_attr_filter.so 7f15bb63c000-7f15bb63d000 rw-p 00003000 fe:01 664652 /usr/lib64/freeradius/rlm_attr_filter.so 7f15bb63d000-7f15bb645000 r-xp 00000000 fe:01 664850 /usr/lib64/freeradius/rlm_expr.so 7f15bb645000-7f15bb844000 ---p 00008000 fe:01 664850 /usr/lib64/freeradius/rlm_expr.so 7f15bb844000-7f15bb845000 r--p 00007000 fe:01 664850 /usr/lib64/freeradius/rlm_expr.so 7f15bb845000-7f15bb846000 rw-p 00008000 fe:01 664850 /usr/lib64/freeradius/rlm_expr.so 7f15bb846000-7f15bb84a000 r-xp 00000000 fe:01 664861 /usr/lib64/freeradius/rlm_passwd.so 7f15bb84a000-7f15bba49000 ---p 00004000 fe:01 664861 /usr/lib64/freeradius/rlm_passwd.so 7f15bba49000-7f15bba4a000 r--p 00003000 fe:01 664861 /usr/lib64/freeradius/rlm_passwd.so 7f15bba4a000-7f15bba4b000 rw-p 00004000 fe:01 664861 /usr/lib64/freeradius/rlm_passwd.so 7f15bba4b000-7f15bba4c000 r-xp 00000000 fe:01 664883 /usr/lib64/freeradius/rlm_utf8.so 7f15bba4c000-7f15bbc4c000 ---p 00001000 fe:01 664883 /usr/lib64/freeradius/rlm_utf8.so 7f15bbc4c000-7f15bbc4d000 r--p 00001000 fe:01 664883 /usr/lib64/freeradius/rlm_utf8.so 7f15bbc4d000-7f15bbc4e000 rw-p 00002000 fe:01 664883 /usr/lib64/freeradius/rlm_utf8.so 7f15bbc4e000-7f15bbc54000 r-xp 00000000 fe:01 665158 /usr/lib64/freeradius/rlm_pap.so 7f15bbc54000-7f15bbe53000 ---p 00006000 fe:01 665158 /usr/lib64/freeradius/rlm_pap.so 7f15bbe53000-7f15bbe54000 r--p 00005000 fe:01 665158 /usr/lib64/freeradius/rlm_pap.so 7f15bbe54000-7f15bbe55000 rw-p 00006000 fe:01 665158 /usr/lib64/freeradius/rlm_pap.so 7f15bbe55000-7f15bbe60000 r-xp 00000000 fe:01 664858 /usr/lib64/freeradius/rlm_mschap.so 7f15bbe60000-7f15bc05f000 ---p 0000b000 fe:01 664858 /usr/lib64/freeradius/rlm_mschap.so 7f15bc05f000-7f15bc060000 r--p 0000a000 fe:01 664858 /usr/lib64/freeradius/rlm_mschap.so 7f15bc060000-7f15bc061000 rw-p 0000b000 fe:01 664858 /usr/lib64/freeradius/rlm_mschap.so 7f15bc061000-7f15bc065000 r-xp 00000000 fe:01 664704 /usr/lib64/freeradius/rlm_detail.so 7f15bc065000-7f15bc264000 ---p 00004000 fe:01 664704 /usr/lib64/freeradius/rlm_detail.so 7f15bc264000-7f15bc265000 r--p 00003000 fe:01 664704 /usr/lib64/freeradius/rlm_detail.so 7f15bc265000-7f15bc266000 rw-p 00004000 fe:01 664704 /usr/lib64/freeradius/rlm_detail.so 7f15bc266000-7f15bc268000 r-xp 00000000 fe:01 664655 /usr/lib64/freeradius/rlm_chap.so 7f15bc268000-7f15bc467000 ---p 00002000 fe:01 664655 /usr/lib64/freeradius/rlm_chap.so 7f15bc467000-7f15bc468000 r--p 00001000 fe:01 664655 /usr/lib64/freeradius/rlm_chap.so 7f15bc468000-7f15bc469000 rw-p 00002000 fe:01 664655 /usr/lib64/freeradius/rlm_chap.so 7f15bc469000-7f15bc470000 r-xp 00000000 fe:01 664921 /usr/lib64/freeradius/libfreeradius-dhcp.so 7f15bc470000-7f15bc66f000 ---p 00007000 fe:01 664921 /usr/lib64/freeradius/libfreeradius-dhcp.so 7f15bc66f000-7f15bc670000 r--p 00006000 fe:01 664921 /usr/lib64/freeradius/libfreeradius-dhcp.so 7f15bc670000-7f15bc671000 rw-p 00007000 fe:01 664921 /usr/lib64/freeradius/libfreeradius-dhcp.so 7f15bc671000-7f15bc673000 r-xp 00000000 fe:01 664706 /usr/lib64/freeradius/rlm_dhcp.so 7f15bc673000-7f15bc873000 ---p 00002000 fe:01 664706 /usr/lib64/freeradius/rlm_dhcp.so 7f15bc873000-7f15bc874000 r--p 00002000 fe:01 664706 /usr/lib64/freeradius/rlm_dhcp.so 7f15bc874000-7f15bc875000 rw-p 00003000 fe:01 664706 /usr/lib64/freeradius/rlm_dhcp.so 7f15bc875000-7f15bc878000 r-xp 00000000 fe:01 665160 /usr/lib64/freeradius/rlm_realm.so 7f15bc878000-7f15bca77000 ---p 00003000 fe:01 665160 /usr/lib64/freeradius/rlm_realm.so 7f15bca77000-7f15bca78000 r--p 00002000 fe:01 665160 /usr/lib64/freeradius/rlm_realm.so 7f15bca78000-7f15bca79000 rw-p 00003000 fe:01 665160 /usr/lib64/freeradius/rlm_realm.so 7f15bca79000-7f15bca7b000 r-xp 00000000 fe:01 664702 /usr/lib64/freeradius/rlm_date.so 7f15bca7b000-7f15bcc7a000 ---p 00002000 fe:01 664702 /usr/lib64/freeradius/rlm_date.so 7f15bcc7a000-7f15bcc7b000 r--p 00001000 fe:01 664702 /usr/lib64/freeradius/rlm_date.so 7f15bcc7b000-7f15bcc7c000 rw-p 00002000 fe:01 664702 /usr/lib64/freeradius/rlm_date.so 7f15bcc7c000-7f15bcc81000 r-xp 00000000 fe:01 664653 /usr/lib64/freeradius/rlm_cache.so 7f15bcc81000-7f15bce80000 ---p 00005000 fe:01 664653 /usr/lib64/freeradius/rlm_cache.so 7f15bce80000-7f15bce81000 r--p 00004000 fe:01 664653 /usr/lib64/freeradius/rlm_cache.so 7f15bce81000-7f15bce82000 rw-p 00005000 fe:01 664653 /usr/lib64/freeradius/rlm_cache.so 7f15bce82000-7f15bce85000 r-xp 00000000 fe:01 665165 /usr/lib64/freeradius/rlm_unix.so 7f15bce85000-7f15bd084000 ---p 00003000 fe:01 665165 /usr/lib64/freeradius/rlm_unix.so 7f15bd084000-7f15bd085000 r--p 00002000 fe:01 665165 /usr/lib64/freeradius/rlm_unix.so 7f15bd085000-7f15bd086000 rw-p 00003000 fe:01 665165 /usr/lib64/freeradius/rlm_unix.so 7f15bd086000-7f15bd088000 r-xp 00000000 fe:01 665161 /usr/lib64/freeradius/rlm_replicate.so 7f15bd088000-7f15bd288000 ---p 00002000 fe:01 665161 /usr/lib64/freeradius/rlm_replicate.so 7f15bd288000-7f15bd289000 r--p 00002000 fe:01 665161 /usr/lib64/freeradius/rlm_replicate.so 7f15bd289000-7f15bd28a000 rw-p 00003000 fe:01 665161 /usr/lib64/freeradius/rlm_replicate.so 7f15bd28a000-7f15bd28c000 r-xp 00000000 fe:01 664882 /usr/lib64/freeradius/rlm_unpack.so 7f15bd28c000-7f15bd48c000 ---p 00002000 fe:01 664882 /usr/lib64/freeradius/rlm_unpack.so 7f15bd48c000-7f15bd48d000 r--p 00002000 fe:01 664882 /usr/lib64/freeradius/rlm_unpack.so 7f15bd48d000-7f15bd48e000 rw-p 00003000 fe:01 664882 /usr/lib64/freeradius/rlm_unpack.so 7f15bd48e000-7f15bd491000 r-xp 00000000 fe:01 665155 /usr/lib64/freeradius/rlm_exec.so 7f15bd491000-7f15bd690000 ---p 00003000 fe:01 665155 /usr/lib64/freeradius/rlm_exec.so 7f15bd690000-7f15bd691000 r--p 00002000 fe:01 665155 /usr/lib64/freeradius/rlm_exec.so 7f15bd691000-7f15bd692000 rw-p 00003000 fe:01 665155 /usr/lib64/freeradius/rlm_exec.so 7f15bd692000-7f15bd696000 r-xp 00000000 fe:01 665150 /usr/lib64/freeradius/rlm_digest.so 7f15bd696000-7f15bd895000 ---p 00004000 fe:01 665150 /usr/lib64/freeradius/rlm_digest.so 7f15bd895000-7f15bd896000 r--p 00003000 fe:01 665150 /usr/lib64/freeradius/rlm_digest.so 7f15bd896000-7f15bd897000 rw-p 00004000 fe:01 665150 /usr/lib64/freeradius/rlm_digest.so 7f15bd897000-7f15bd899000 r-xp 00000000 fe:01 664849 /usr/lib64/freeradius/rlm_expiration.so 7f15bd899000-7f15bda98000 ---p 00002000 fe:01 664849 /usr/lib64/freeradius/rlm_expiration.so 7f15bda98000-7f15bda99000 r--p 00001000 fe:01 664849 /usr/lib64/freeradius/rlm_expiration.so 7f15bda99000-7f15bda9a000 rw-p 00002000 fe:01 664849 /usr/lib64/freeradius/rlm_expiration.so 7f15bda9a000-7f15bda9d000 r-xp 00000000 fe:01 664857 /usr/lib64/freeradius/rlm_logintime.so 7f15bda9d000-7f15bdc9c000 ---p 00003000 fe:01 664857 /usr/lib64/freeradius/rlm_logintime.so 7f15bdc9c000-7f15bdc9d000 r--p 00002000 fe:01 664857 /usr/lib64/freeradius/rlm_logintime.so 7f15bdc9d000-7f15bdc9e000 rw-p 00003000 fe:01 664857 /usr/lib64/freeradius/rlm_logintime.so 7f15bdc9e000-7f15bdca1000 r-xp 00000000 fe:01 664864 /usr/lib64/freeradius/rlm_preprocess.so 7f15bdca1000-7f15bdea1000 ---p 00003000 fe:01 664864 /usr/lib64/freeradius/rlm_preprocess.so 7f15bdea1000-7f15bdea2000 r--p 00003000 fe:01 664864 /usr/lib64/freeradius/rlm_preprocess.so 7f15bdea2000-7f15bdea3000 rw-p 00004000 fe:01 664864 /usr/lib64/freeradius/rlm_preprocess.so 7f15bdea3000-7f15bdea6000 r-xp 00000000 fe:01 664855 /usr/lib64/freeradius/rlm_linelog.so 7f15bdea6000-7f15be0a5000 ---p 00003000 fe:01 664855 /usr/lib64/freeradius/rlm_linelog.so 7f15be0a5000-7f15be0a6000 r--p 00002000 fe:01 664855 /usr/lib64/freeradius/rlm_linelog.so 7f15be0a6000-7f15be0a7000 rw-p 00003000 fe:01 664855 /usr/lib64/freeradius/rlm_linelog.so 7f15be0a7000-7f15be0aa000 r-xp 00000000 fe:01 664852 /usr/lib64/freeradius/rlm_files.so 7f15be0aa000-7f15be2a9000 ---p 00003000 fe:01 664852 /usr/lib64/freeradius/rlm_files.so 7f15be2a9000-7f15be2aa000 r--p 00002000 fe:01 664852 /usr/lib64/freeradius/rlm_files.so 7f15be2aa000-7f15be2ab000 rw-p 00003000 fe:01 664852 /usr/lib64/freeradius/rlm_files.so 7f15be2ab000-7f15be2ad000 r-xp 00000000 fe:01 665163 /usr/lib64/freeradius/rlm_soh.so 7f15be2ad000-7f15be4ac000 ---p 00002000 fe:01 665163 /usr/lib64/freeradius/rlm_soh.so 7f15be4ac000-7f15be4ad000 r--p 00001000 fe:01 665163 /usr/lib64/freeradius/rlm_soh.so 7f15be4ad000-7f15be4ae000 rw-p 00002000 fe:01 665163 /usr/lib64/freeradius/rlm_soh.so 7f15be4ae000-7f15be4b0000 r-xp 00000000 fe:01 664651 /usr/lib64/freeradius/rlm_always.so 7f15be4b0000-7f15be6af000 ---p 00002000 fe:01 664651 /usr/lib64/freeradius/rlm_always.so 7f15be6af000-7f15be6b0000 r--p 00001000 fe:01 664651 /usr/lib64/freeradius/rlm_always.so 7f15be6b0000-7f15be6b1000 rw-p 00002000 fe:01 664651 /usr/lib64/freeradius/rlm_always.so 7f15be6b1000-7f15be6bc000 r-xp 00000000 fe:01 665152 /usr/lib64/freeradius/rlm_eap.so 7f15be6bc000-7f15be8bb000 ---p 0000b000 fe:01 665152 /usr/lib64/freeradius/rlm_eap.so 7f15be8bb000-7f15be8bc000 r--p 0000a000 fe:01 665152 /usr/lib64/freeradius/rlm_eap.so 7f15be8bc000-7f15be8bd000 rw-p 0000b000 fe:01 665152 /usr/lib64/freeradius/rlm_eap.so 7f15be8bd000-7f15be8bf000 r-xp 00000000 fe:01 665151 /usr/lib64/freeradius/rlm_dynamic_clients.so 7f15be8bf000-7f15beabe000 ---p 00002000 fe:01 665151 /usr/lib64/freeradius/rlm_dynamic_clients.so 7f15beabe000-7f15beabf000 r--p 00001000 fe:01 665151 /usr/lib64/freeradius/rlm_dynamic_clients.so 7f15beabf000-7f15beac0000 rw-p 00002000 fe:01 665151 /usr/lib64/freeradius/rlm_dynamic_clients.so 7f15beac0000-7f15beda6000 r-xp 00000000 fe:01 154715 /usr/lib64/libmysqlclient.so.18.0.0 7f15beda6000-7f15befa6000 ---p 002e6000 fe:01 154715 /usr/lib64/libmysqlclient.so.18.0.0 7f15befa6000-7f15befad000 r--p 002e6000 fe:01 154715 /usr/lib64/libmysqlclient.so.18.0.0 7f15befad000-7f15bf013000 rw-p 002ed000 fe:01 154715 /usr/lib64/libmysqlclient.so.18.0.0 7f15bf013000-7f15bf01c000 rw-p 00000000 00:00 0 7f15bf01c000-7f15bf020000 r-xp 00000000 fe:01 664873 /usr/lib64/freeradius/rlm_sql_mysql.so 7f15bf020000-7f15bf21f000 ---p 00004000 fe:01 664873 /usr/lib64/freeradius/rlm_sql_mysql.so 7f15bf21f000-7f15bf220000 r--p 00003000 fe:01 664873 /usr/lib64/freeradius/rlm_sql_mysql.so 7f15bf220000-7f15bf221000 rw-p 00004000 fe:01 664873 /usr/lib64/freeradius/rlm_sql_mysql.so 7f15bf221000-7f15bf22c000 r-xp 00000000 fe:01 664869 /usr/lib64/freeradius/rlm_sql.so 7f15bf22c000-7f15bf42c000 ---p 0000b000 fe:01 664869 /usr/lib64/freeradius/rlm_sql.so 7f15bf42c000-7f15bf42d000 r--p 0000b000 fe:01 664869 /usr/lib64/freeradius/rlm_sql.so 7f15bf42d000-7f15bf42e000 rw-p 0000c000 fe:01 664869 /usr/lib64/freeradius/rlm_sql.so 7f15bf42e000-7f15bf432000 r-xp 00000000 fe:01 664865 /usr/lib64/freeradius/rlm_radutmp.so 7f15bf432000-7f15bf631000 ---p 00004000 fe:01 664865 /usr/lib64/freeradius/rlm_radutmp.so 7f15bf631000-7f15bf632000 r--p 00003000 fe:01 664865 /usr/lib64/freeradius/rlm_radutmp.so 7f15bf632000-7f15bf633000 rw-p 00004000 fe:01 664865 /usr/lib64/freeradius/rlm_radutmp.so 7f15bf633000-7f15bf72f000 r-xp 00000000 fe:01 524309 /lib64/libm-2.22.so 7f15bf72f000-7f15bf92e000 ---p 000fc000 fe:01 524309 /lib64/libm-2.22.so 7f15bf92e000-7f15bf92f000 r--p 000fb000 fe:01 524309 /lib64/libm-2.22.so 7f15bf92f000-7f15bf930000 rw-p 000fc000 fe:01 524309 /lib64/libm-2.22.so 7f15bf930000-7f15bf976000 r-xp 00000000 fe:01 524349 /lib64/libdbus-1.so.3.8.14 7f15bf976000-7f15bfb75000 ---p 00046000 fe:01 524349 /lib64/libdbus-1.so.3.8.14 7f15bfb75000-7f15bfb76000 r--p 00045000 fe:01 524349 /lib64/libdbus-1.so.3.8.14 7f15bfb76000-7f15bfb77000 rw-p 00046000 fe:01 524349 /lib64/libdbus-1.so.3.8.14 7f15bfb77000-7f15bfb93000 r-xp 00000000 fe:01 134593 /usr/lib64/libnl-3.so.200.18.0 7f15bfb93000-7f15bfd92000 ---p 0001c000 fe:01 134593 /usr/lib64/libnl-3.so.200.18.0 7f15bfd92000-7f15bfd94000 r--p 0001b000 fe:01 134593 /usr/lib64/libnl-3.so.200.18.0 7f15bfd94000-7f15bfd95000 rw-p 0001d000 fe:01 134593 /usr/lib64/libnl-3.so.200.18.0 7f15bfd95000-7f15bfd9a000 r-xp 00000000 fe:01 134597 /usr/lib64/libnl-genl-3.so.200.18.0 7f15bfd9a000-7f15bff9a000 ---p 00005000 fe:01 134597 /usr/lib64/libnl-genl-3.so.200.18.0 7f15bff9a000-7f15bff9b000 r--p 00005000 fe:01 134597 /usr/lib64/libnl-genl-3.so.200.18.0 7f15bff9b000-7f15bff9c000 rw-p 00006000 fe:01 134597 /usr/lib64/libnl-genl-3.so.200.18.0 7f15bff9c000-7f15bffb1000 r-xp 00000000 fe:01 524345 /lib64/libz.so.1.2.8 7f15bffb1000-7f15c01b0000 ---p 00015000 fe:01 524345 /lib64/libz.so.1.2.8 7f15c01b0000-7f15c01b1000 r--p 00014000 fe:01 524345 /lib64/libz.so.1.2.8 7f15c01b1000-7f15c01b2000 rw-p 00015000 fe:01 524345 /lib64/libz.so.1.2.8 7f15c01b2000-7f15c01f5000 r-xp 00000000 fe:01 135444 /usr/lib64/libpcap.so.1.8.1 7f15c01f5000-7f15c03f4000 ---p 00043000 fe:01 135444 /usr/lib64/libpcap.so.1.8.1 7f15c03f4000-7f15c03f6000 r--p 00042000 fe:01 135444 /usr/lib64/libpcap.so.1.8.1 7f15c03f6000-7f15c03f7000 rw-p 00044000 fe:01 135444 /usr/lib64/libpcap.so.1.8.1 7f15c03f7000-7f15c0590000 r-xp 00000000 fe:01 524301 /lib64/libc-2.22.so 7f15c0590000-7f15c0790000 ---p 00199000 fe:01 524301 /lib64/libc-2.22.so 7f15c0790000-7f15c0794000 r--p 00199000 fe:01 524301 /lib64/libc-2.22.so 7f15c0794000-7f15c0796000 rw-p 0019d000 fe:01 524301 /lib64/libc-2.22.so 7f15c0796000-7f15c079a000 rw-p 00000000 00:00 0 7f15c079a000-7f15c07a5000 r-xp 00000000 fe:01 524305 /lib64/libcrypt-2.22.so 7f15c07a5000-7f15c09a5000 ---p 0000b000 fe:01 524305 /lib64/libcrypt-2.22.so 7f15c09a5000-7f15c09a6000 r--p 0000b000 fe:01 524305 /lib64/libcrypt-2.22.so 7f15c09a6000-7f15c09a7000 rw-p 0000c000 fe:01 524305 /lib64/libcrypt-2.22.so 7f15c09a7000-7f15c09d5000 rw-p 00000000 00:00 0 7f15c09d5000-7f15c09ed000 r-xp 00000000 fe:01 524331 /lib64/libpthread-2.22.so 7f15c09ed000-7f15c0bec000 ---p 00018000 fe:01 524331 /lib64/libpthread-2.22.so 7f15c0bec000-7f15c0bed000 r--p 00017000 fe:01 524331 /lib64/libpthread-2.22.so 7f15c0bed000-7f15c0bee000 rw-p 00018000 fe:01 524331 /lib64/libpthread-2.22.so 7f15c0bee000-7f15c0bf2000 rw-p 00000000 00:00 0 7f15c0bf2000-7f15c0bf4000 r-xp 00000000 fe:01 524307 /lib64/libdl-2.22.so 7f15c0bf4000-7f15c0df4000 ---p 00002000 fe:01 524307 /lib64/libdl-2.22.so 7f15c0df4000-7f15c0df5000 r--p 00002000 fe:01 524307 /lib64/libdl-2.22.so 7f15c0df5000-7f15c0df6000 rw-p 00003000 fe:01 524307 /lib64/libdl-2.22.so 7f15c0df6000-7f15c0e0a000 r-xp 00000000 fe:01 524333 /lib64/libresolv-2.22.so 7f15c0e0a000-7f15c1009000 ---p 00014000 fe:01 524333 /lib64/libresolv-2.22.so 7f15c1009000-7f15c100a000 r--p 00013000 fe:01 524333 /lib64/libresolv-2.22.so 7f15c100a000-7f15c100b000 rw-p 00014000 fe:01 524333 /lib64/libresolv-2.22.so 7f15c100b000-7f15c100d000 rw-p 00000000 00:00 0 7f15c100d000-7f15c1022000 r-xp 00000000 fe:01 524313 /lib64/libnsl-2.22.so 7f15c1022000-7f15c1221000 ---p 00015000 fe:01 524313 /lib64/libnsl-2.22.so 7f15c1221000-7f15c1222000 r--p 00014000 fe:01 524313 /lib64/libnsl-2.22.so 7f15c1222000-7f15c1223000 rw-p 00015000 fe:01 524313 /lib64/libnsl-2.22.so 7f15c1223000-7f15c1225000 rw-p 00000000 00:00 0 7f15c1225000-7f15c1235000 r-xp 00000000 fe:01 160961 /usr/lib64/libtalloc.so.2.1.6 7f15c1235000-7f15c1434000 ---p 00010000 fe:01 160961 /usr/lib64/libtalloc.so.2.1.6 7f15c1434000-7f15c1435000 r--p 0000f000 fe:01 160961 /usr/lib64/libtalloc.so.2.1.6 7f15c1435000-7f15c1436000 rw-p 00010000 fe:01 160961 /usr/lib64/libtalloc.so.2.1.6 7f15c1436000-7f15c1497000 r-xp 00000000 fe:01 524364 /lib64/libssl.so.1.0.0 7f15c1497000-7f15c1697000 ---p 00061000 fe:01 524364 /lib64/libssl.so.1.0.0 7f15c1697000-7f15c169b000 r--p 00061000 fe:01 524364 /lib64/libssl.so.1.0.0 7f15c169b000-7f15c16a2000 rw-p 00065000 fe:01 524364 /lib64/libssl.so.1.0.0 7f15c16a2000-7f15c18d1000 r-xp 00000000 fe:01 524363 /lib64/libcrypto.so.1.0.0 7f15c18d1000-7f15c1ad1000 ---p 0022f000 fe:01 524363 /lib64/libcrypto.so.1.0.0 7f15c1ad1000-7f15c1aec000 r--p 0022f000 fe:01 524363 /lib64/libcrypto.so.1.0.0 7f15c1aec000-7f15c1afa000 rw-p 0024a000 fe:01 524363 /lib64/libcrypto.so.1.0.0 7f15c1afa000-7f15c1afe000 rw-p 00000000 00:00 0 7f15c1afe000-7f15c1b0b000 r-xp 00000000 fe:01 664922 /usr/lib64/freeradius/libfreeradius-eap.so 7f15c1b0b000-7f15c1d0a000 ---p 0000d000 fe:01 664922 /usr/lib64/freeradius/libfreeradius-eap.so 7f15c1d0a000-7f15c1d0b000 r--p 0000c000 fe:01 664922 /usr/lib64/freeradius/libfreeradius-eap.so 7f15c1d0b000-7f15c1d0c000 rw-p 0000d000 fe:01 664922 /usr/lib64/freeradius/libfreeradius-eap.so 7f15c1d0c000-7f15c1d52000 r-xp 00000000 fe:01 664899 /usr/lib64/freeradius/libfreeradius-radius.so 7f15c1d52000-7f15c1f51000 ---p 00046000 fe:01 664899 /usr/lib64/freeradius/libfreeradius-radius.so 7f15c1f51000-7f15c1f52000 r--p 00045000 fe:01 664899 /usr/lib64/freeradius/libfreeradius-radius.so 7f15c1f52000-7f15c1f53000 rw-p 00046000 fe:01 664899 /usr/lib64/freeradius/libfreeradius-radius.so 7f15c1f53000-7f15c1f55000 rw-p 00000000 00:00 0 7f15c1f55000-7f15c1f8d000 r-xp 00000000 fe:01 664902 /usr/lib64/freeradius/libfreeradius-server.so 7f15c1f8d000-7f15c218d000 ---p 00038000 fe:01 664902 /usr/lib64/freeradius/libfreeradius-server.so 7f15c218d000-7f15c218e000 r--p 00038000 fe:01 664902 /usr/lib64/freeradius/libfreeradius-server.so 7f15c218e000-7f15c218f000 rw-p 00039000 fe:01 664902 /usr/lib64/freeradius/libfreeradius-server.so 7f15c218f000-7f15c21b0000 r-xp 00000000 fe:01 524293 /lib64/ld-2.22.so 7f15c2395000-7f15c239e000 rw-p 00000000 00:00 0 7f15c23ac000-7f15c23af000 rw-p 00000000 00:00 0 7f15c23af000-7f15c23b0000 r--p 00020000 fe:01 524293 /lib64/ld-2.22.so 7f15c23b0000-7f15c23b1000 rw-p 00021000 fe:01 524293 /lib64/ld-2.22.so 7f15c23b1000-7f15c23b2000 rw-p 00000000 00:00 0 7ffc1530f000-7ffc15330000 rw-p 00000000 00:00 0 [stack] 7ffc15343000-7ffc15345000 r--p 00000000 00:00 0 [vvar] 7ffc15345000-7ffc15347000 r-xp 00000000 00:00 0 [vdso] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall] Aborted -- Best regards, Anton Kiryushkin

3 12

cucm and ip phones
by Vacheslav 02 Oct '17

02 Oct '17

Peace, I configured my ip phones to use mab, but I read that with Radius it is possible to authenticate capable ip phones with tls. I searched the internet on how to do it but found almost nothing. Should I import the created self signed certificates from the freeradius server to the cucm? Or is that I have to export the cucm certificates to the cert directory of the freeradius server? Anyone has experience in configuring cucm with dot1x?

3 7

Freeradius issues related with DMZ firewall
by Ramon Escriba 02 Oct '17

02 Oct '17

Hi Experts, I have a 'funny' problem with my freeradius 3.0.4 and our Aruba controller. I am testing a freeradius with 802.1x (EAP-MSCHAPv2: WPA2-Ent+AES+PEAP) configuration that works pretty well when both, radius & Aruba, are in our internal network. So works fine with Mac,Win7,Android,iphone, etc The problem came when we moved the Machine to DMZ (Pfsense fw). Lots of small problems (dns's, hosts,etc) raised and were solved. I used the eapol_test successfully on an internal linux that connects successfully to de radius in DMZ, so I went ahead. But when we do the same Mac,Win7,Android,etc WiFIi connection tests with the radius in DMZ, the authentication fails (see radius -X log below). To test if it was a Firewall issues, UDP/TCP ports are fully open between radius(DMZ) & Aruba(internal), in both ways. We opened dmz radius to the internal DNS, I used a Firewall catch all rule to get any ipv4+6 that goes missing by the Firewall rules, but nothing shows up. I tried to Wireshark the Wifi connection from the client win7 without success. Well, I hope someone else had a similar problem and could share the solution, or any clue. Logs of the failing connection ( Win7 -> Aruba ->radius DMZ) , maybe you can see something strange: 10.10.10.10: Aruba 84.84.84.84: Radius at DMZ Received Access-Request Id 111 from 10.10.10.10:32866 to 84.84.84.84:1812 length 205 User-Name = 'test(a)acme.com' NAS-IP-Address = 10.10.10.10 NAS-Port = 0 NAS-Identifier = '10.10.10.10' NAS-Port-Type = Wireless-802.11 Calling-Station-Id = 'A4C494Exxxxx' Called-Station-Id = '000B866xxxxx' Service-Type = Login-User Framed-MTU = 1100 EAP-Message = 0x0xx400xxxxxx146xxxxxxxxxxxc673 Aruba-Essid-Name = 'TEST_SSID' Aruba-Location-Id = 'AP1' Aruba-AP-Group = 'default' Message-Authenticator = 0xbxxx268xxxxxxxxxxxxc10f08dae88 (0) Received Access-Request packet from host 10.10.10.10 port 32866, id=111, length=205 (0) User-Name = 'test(a)acme.com' (0) NAS-IP-Address = 10.10.10.10 (0) NAS-Port = 0 (0) NAS-Identifier = '10.10.10.10' (0) NAS-Port-Type = Wireless-802.11 (0) Calling-Station-Id = 'A4C494XXXXXX' (0) Called-Station-Id = ''000B86xxxxxx' (0) Service-Type = Login-User (0) Framed-MTU = 1100 (0) EAP-Message = 0x02040019017465xxxxxxxxxxxx4063656c6c732e6573 (0) Aruba-Essid-Name = 'TEST_SSID' (0) Aruba-Location-Id = 'AP1' (0) Aruba-AP-Group = 'default' (0) Message-Authenticator = 0xb268fe2779551dxxxxxxxxxxxx08dae88 (0) # Executing section authorize from file /etc/raddb/sites-enabled/default (0) authorize { (0) filter_username filter_username { (0) if (!&User-Name) (0) if (!&User-Name) -> FALSE (0) if (&User-Name =~ / /) (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@.*@/ ) (0) if (&User-Name =~ /@.*@/ ) -> FALSE (0) if (&User-Name =~ /\\.\\./ ) (0) if (&User-Name =~ /\\.\\./ ) -> FALSE (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\\.(.+)$/)) (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\\.(.+)$/)) -> FALSE (0) if (&User-Name =~ /\\.$/) (0) if (&User-Name =~ /\\.$/) -> FALSE (0) if (&User-Name =~ /(a)\\./) (0) if (&User-Name =~ /(a)\\./) -> FALSE (0) } # filter_username filter_username = notfound (0) [preprocess] = ok (0) auth_log : EXPAND /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Addres s}}/auth-detail-%Y%m%d (0) auth_log : --> /var/log/radius/radacct/10.10.10.10/auth-detail-20170929 (0) auth_log : /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Addres s}}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/10.10.10.10/auth-detail-20170929 (0) auth_log : EXPAND %t (0) auth_log : --> Fri Sep 29 16:42:40 2017 (0) [auth_log] = ok (0) [mschap] = noop (0) suffix : Checking for suffix after "@" (0) suffix : Looking up realm "acme.com" for User-Name = "test(a)acme.com" (0) suffix : Found realm "acme.com" (0) suffix : Adding Realm = "acme.com" (0) suffix : Authentication realm is LOCAL (0) [suffix] = ok (0) eap : Peer sent code Response (2) ID 4 length 25 (0) eap : EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize (0) [eap] = ok (0) } # authorize = ok (0) Found Auth-Type = EAP (0) # Executing group from file /etc/raddb/sites-enabled/default (0) authenticate { (0) eap : Peer sent method Identity (1) (0) eap : Calling eap_peap to process EAP data (0) eap_peap : Flushing SSL sessions (of #0) (0) eap_peap : Initiate (0) eap_peap : Start returned 1 (0) eap : New EAP session, adding 'State' attribute to reply 0x7317e1da7312f877 (0) [eap] = handled (0) } # authenticate = handled (0) Sending Access-Challenge packet to host 10.10.10.10 port 32866, id=111, length=0 (0) EAP-Message = 0x010500061920 (0) Message-Authenticator = 0x00000000000000000000000000000000 (0) State = 0x7317e1da7312f877fca7b6e2bbfa846d Sending Access-Challenge Id 111 from 84.84.84.84:1812 to 10.10.10.10:32866 EAP-Message = 0x010500061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x7317e1da7312f877fca7b6e2bbfa846d (0) Finished request Waking up in 0.3 seconds. Waking up in 6.6 seconds. Received Access-Request Id 111 from 10.10.10.10:32866 to 84.84.84.84:1812 length 205 Sending Access-Challenge Id 111 from 84.84.84.84:1812 to 10.10.10.10:32866 Waking up in 999993.0 seconds. Received Access-Request Id 111 from 10.10.10.10:32866 to 84.84.84.84:1812 length 205 Sending Access-Challenge Id 111 from 84.84.84.84:1812 to 10.10.10.10:32866 Waking up in 1999986.0 seconds. Received Access-Request Id 111 from 10.10.10.10:32866 to 84.84.84.84:1812 length 205 Sending Access-Challenge Id 111 from 84.84.84.84:1812 to 10.10.10.10:32866 Waking up in 3999977.0 seconds.

2 1

I want change reply-message for all users
by تعلم البرمجة 02 Oct '17

02 Oct '17

hello iam using freeradius 3.0.11 and i want change reply message Hello $(user-name) for All clients I am using sql i can change when reject but when accept I cant Sorry For My English

3 9

add attribute FreeRADIUS-Client-NAS-Type in req accounting?
by Dmitry Yashin 01 Oct '17

01 Oct '17

hi, how i can add attribute FreeRADIUS-Client-NAS-Type in accounting, i load &FreeRADIUS-Client-NAS-Type = "%{sql: SELECT type FROM nas WHERE host = '%{Packet-Src-IP-Address}'}" from dynamic_clients , and in preacct { update request { &Acct-Unique-Session-Id := "%{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}" &FreeRADIUS-Client-NAS-Type := &control:FreeRADIUS-Client-NAS-Type } } accounting { # ok rest } but in post on rest not see FreeRADIUS-Client-NAS-Type in log Thu Sep 28 21:40:30 2017 : Debug: (324) # Executing section preacct from file /etc/raddb/radiusd.conf Thu Sep 28 21:40:30 2017 : Debug: (324) preacct { Thu Sep 28 21:40:30 2017 : Debug: (324) update request { Thu Sep 28 21:40:30 2017 : Debug: (324) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}} Thu Sep 28 21:40:30 2017 : Debug: (324) --> 9f7d7ee63b81739f567f5703597b1556 Thu Sep 28 21:40:30 2017 : Debug: (324) &Acct-Unique-Session-Id := 9f7d7ee63b81739f567f5703597b1556 Thu Sep 28 21:40:30 2017 : Debug: (324) No attributes updated Thu Sep 28 21:40:30 2017 : Debug: (324) No attributes updated Thu Sep 28 21:40:30 2017 : Debug: (324) No attributes updated Thu Sep 28 21:40:30 2017 : Debug: (324) } # update request = noop Thu Sep 28 21:40:30 2017 : Debug: (324) } # preacct = noop Thu Sep 28 21:40:30 2017 : Debug: (324) # Executing section accounting from file /etc/raddb/radiusd.conf Thu Sep 28 21:40:30 2017 : Debug: (324) accounting { Thu Sep 28 21:40:30 2017 : Debug: (324) modsingle[accounting]: calling rest (rlm_rest)

2 3

rlm_sql_postgresql: 42804: DATATYPE MISMATCH
by Igor Sousa 29 Sep '17

29 Sep '17

Hi everyone, I configured my freeradius (3.0.15) to do authenticating and authorization, it has been working well. When I've tried to configure it to accounting using postgresql database, freeradius doesn't register accounting in database because occurs the fatal error below: *(17) sql: rlm_sql_postgresql: ERROR: column "acctstarttime" is of type timestamp with time zone but expression is of type integer* *(17) sql: rlm_sql_postgresql: LINE 1: ...1ac', '<user-name>', '', '<nas-ip>', '', '', (1506692296...* *(17) sql: rlm_sql_postgresql: ^* *(17) sql: rlm_sql_postgresql: HINT: **You will need to rewrite or cast the expression**.* *(17) sql: SQL query returned: need alt query* *(17) sql: No additional queries configured* *rlm_sql (sql): Released connection (2)* I understand that occurs because rlm_sql_postgresql is waiting for a timestamp, but received a integer. I see that debug gives me a hint "*You will need to rewrite or cast the expression" *. This modifications should do in mods-config/sql/main/postgresql/queries.conf? How do I do it? I'm a newbie about accounting configuration. PS: Freeradius connects to database correctely. *Connected to database 'radius' on 'localhost' server version 90413, protocol version 3, backend PID 22463 * Thanks for your attention, -- Igor Sousa

2 6

LDAP Module Error
by Bhagwat, Shrikant 29 Sep '17

29 Sep '17

# Loaded module rlm_unix # Loading module "unix" from file /usr/local/etc/raddb/mods-enabled/unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" } Creating attribute Unix-Group # Loaded module rlm_unpack # Loading module "unpack" from file /usr/local/etc/raddb/mods-enabled/unpack # Loaded module rlm_utf8 # Loading module "utf8" from file /usr/local/etc/raddb/mods-enabled/utf8 /usr/local/etc/raddb/mods-enabled/ldap[8]: Failed to link to module 'rlm_ldap': /usr/local/lib/rlm_ldap.so: cannot open shared object file: No such file or directory Following procedure was followed to install Freeradius 3.x on Suse Linux Ent Server SP2. Downloaded the tarball file 2. SIMPLE INSTALLATION ---------------------- If you do not need to modify the default configuration, then take the following steps to build and install the server:: $ ./configure $ make $ make install Enabled the ldap module Started above error ********************************************************** Electronic Mail is not secure, may not be read every day, and should not be used for urgent or sensitive issues

2 1