September 2022 - Freeradius-Users - lists.freeradius.org

Doubts about MAC authentication
by 网络时代 21 Sep '22

21 Sep '22

Hello, System version: freeradius-server-3.0.21 After reading the tutorial of mac authentication on the official website, for the last application scenario "Mac Auth authorization by SSID SQL", why should we create a separate table "SSIDMACAUTH"? Is it OK to put "Calling Station ID" and "Called Station SSID" in the radgroupcheck table to check? Looking forward to your professional guidance. Best regards

2 1

Version 3.0.26 has been released
by Matthew Newton 20 Sep '22

20 Sep '22

We have released version 3.0.26 today. This is a stable release for those still on version 3.0 and wish to avoid new features going in to 3.2.x. There have been a small number of new features in 3.0.26. - 3.0.26 now supports OpenSSL 3. This was done to ensure that 3.0 can continue to work on modern systems and has a longer lifespan. Similarly with the addition of TLS 1.3. - Some dictionaries have been added/updated. - A new xlat added, concat, to concatenate attributes with a character. - Other feature updates are largely configuration additions and packaging improvements. This release also fixes a number of bugs since the last release. Full release notes are available on the web site, together with links to FTP downloads: https://freeradius.org/releases/ ftp://ftp.freeradius.org/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_26 Packages are available on the Network RADIUS site: https://packages.networkradius.com/ Docker images have been pushed to Dockerhub. (Note that the 'latest' tag currently points to version 3.0. This will change to 3.2 at the next release. Please use the latest-3.0 tag to follow 3.0.) We recommend upgrading to version 3.2 for most deployments. -- Matthew

1 0

Stuck on ntlm_auth/mschap setup between FreeRADIUS & Samba DC
by Jesper Nemholt 19 Sep '22

19 Sep '22

Hi I'm trying to setup Ubiquiti UniFi to authenticate users in AD, and the ntlm_auth portion is causing me some issues. As UniFi doesn't support AD natively, I'm using RADIUS between UniFi and AD. My AD is a Samba 4 server, Samba is configured & working and the freeradius server has been joined to the domain. root@radius:~# wbinfo -u administrator foo guest krbtgt ntlm_auth on the command line works OK : root@radius:~# ntlm_auth --request-nt-key --domain=BAR --username=foo --password=xxx NT_STATUS_OK: The operation completed successfully. (0x0) I've followed a couple of guidelines specific for this setup (with UniFi) but none of them appear to work, neither with winbind nor ntlm_auth as method within freeradius. I'm currently using this in my mods-available/mschap file : ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --domain=%{mschap:NT-Domain} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}" with_ntdomain_hack = yes When I run radtest from CLI I get this : *root@radius*:*~*$ radtest -t mschap "BAR\foo" xxx localhost 0 testing123 Sent Access-Request Id 245 from 0.0.0.0:43248 to 127.0.0.1:1812 length 136 User-Name = "BAR\\foo" MS-CHAP-Password = "xxx" NAS-IP-Address = 192.168.10.8 NAS-Port = 0 Message-Authenticator = 0x00 Cleartext-Password = "xxx" MS-CHAP-Challenge = 0xa822149a03011b15 MS-CHAP-Response = 0x00010000000000000000000000000000000000000000000000003ca8fa0c61ff26ce4d7aa85a43047ff78b4519f45d2c431d Received Access-Reject Id 245 from 127.0.0.1:1812 to 127.0.0.1:43248 length 61 MS-CHAP-Error = "\000E=691 R=1 C=1acfee53ed2e2e7c V=2" (0) -: Expected Access-Accept got Access-Reject On the radius debug log I get this : (0) Found Auth-Type = mschap (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) authenticate { (0) mschap: Client is using MS-CHAPv1 with NT-Password (0) mschap: Executing: /usr/bin/ntlm_auth --request-nt-key --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --domain=%{mschap:NT-Domain} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}: (0) mschap: EXPAND --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} (0) mschap: --> --username=BAR\\foo (0) mschap: EXPAND --domain=%{mschap:NT-Domain} (0) mschap: --> --domain=BAR (0) mschap: mschap1: a8 (0) mschap: EXPAND --challenge=%{%{mschap:Challenge}:-00} (0) mschap: --> --challenge=a822149a03011b15 (0) mschap: EXPAND --nt-response=%{%{mschap:NT-Response}:-00} (0) mschap: --> --nt-response=3ca8fa0c61ff26ce4d7aa85a43047ff78b4519f45d2c431d (0) mschap: ERROR: Program returned code (1) and output 'The attempted logon is invalid. This is either due to a bad username or authentication information. (0xc000006d)' (0) mschap: External script failed (0) mschap: ERROR: External script says: The attempted logon is invalid. This is either due to a bad username or authentication information. (0xc000006d) (0) mschap: ERROR: MS-CHAP2-Response is incorrect (0) [mschap] = reject (0) } # authenticate = reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Post-Auth-Type REJECT { (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> BAR\\foo (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 (0) [attr_filter.access_reject] = updated (0) [eap] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Login incorrect (mschap: Program returned code (1) and output 'The attempted logon is invalid. This is either due to a bad username or authentication information. (0xc000006d)'): [BAR\foo/<via Auth-Type = mschap>] (from client localhost port 0) (0) Delaying response for 1.000000 seconds Waking up in 0.2 seconds. Waking up in 0.7 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 245 from 127.0.0.1:1812 to 127.0.0.1:43248 length 61 (0) MS-CHAP-Error = "\000E=691 R=1 C=1acfee53ed2e2e7c V=2" Waking up in 3.9 seconds. (0) Cleaning up request packet ID 245 with timestamp +25 due to cleanup_delay was reached Ready to process requests So my guess is that my ntlm_auth line is not correct, or I missed some other parameter somewhere, but I've tried quite a few options so far, and they seem to all fail. Any suggestions ? I did see some recommending using winbind instead of ntlm_auth, but I wanted to control access via group membership and it seems that is not an option with winbind. If anyone has a working example of what I'm trying to do (UniFi-->FreeRADIUS-->Samba DC) I'm all ears as the examples I found so far are not working. /Jesper

3 2

Accounting requests over TCP
by Abhilash Y G 19 Sep '22

19 Sep '22

I am configuring a virtual server to listen for authentication and accounting requests on TCP ports 2017 and 2018 respectively. When the request comes for the same host on 2018 (accounting port) I am seeing an error in radius log something like below. Please note all accounting messages are being successfully processed by virtual server. Mon Sep 19 16:24:23 2022 : Error: Failed inserting TCP socket into parent list. Mon Sep 19 16:24:23 2022 : Info: ... adding new socket acct from client (20 8.59.110.70, 45060) -> (*, 2018) Mon Sep 19 16:24:23 2022 : Info: ... shutting down socket acct from client (208.59.110.70, 45060) -> (*, 2018) freeradius logs in debug mode. Mon Sep 19 17:27:08 2022 : Debug: Server was built with: Mon Sep 19 17:27:08 2022 : Debug: accounting : yes Mon Sep 19 17:27:08 2022 : Debug: authentication : yes Mon Sep 19 17:27:08 2022 : Debug: ascend-binary-attributes : yes Mon Sep 19 17:27:08 2022 : Debug: coa : yes Mon Sep 19 17:27:08 2022 : Debug: control-socket : yes Mon Sep 19 17:27:08 2022 : Debug: detail : yes Mon Sep 19 17:27:08 2022 : Debug: dhcp : yes Mon Sep 19 17:27:08 2022 : Debug: dynamic-clients : yes Mon Sep 19 17:27:08 2022 : Debug: osfc2 : no Mon Sep 19 17:27:08 2022 : Debug: proxy : yes Mon Sep 19 17:27:08 2022 : Debug: regex-pcre : no Mon Sep 19 17:27:08 2022 : Debug: regex-posix : yes Mon Sep 19 17:27:08 2022 : Debug: regex-posix-extended : yes Mon Sep 19 17:27:08 2022 : Debug: session-management : yes Mon Sep 19 17:27:08 2022 : Debug: stats : yes Mon Sep 19 17:27:08 2022 : Debug: systemd : yes Mon Sep 19 17:27:08 2022 : Debug: tcp : yes Mon Sep 19 17:27:08 2022 : Debug: threads : yes Mon Sep 19 17:27:08 2022 : Debug: tls : yes Mon Sep 19 17:27:08 2022 : Debug: unlang : yes Mon Sep 19 17:27:08 2022 : Debug: vmps : yes Mon Sep 19 17:27:08 2022 : Debug: developer : no Mon Sep 19 17:27:08 2022 : Debug: Server core libs: Mon Sep 19 17:27:08 2022 : Debug: freeradius-server : 3.0.26 Mon Sep 19 17:27:08 2022 : Debug: talloc : 2.3.* Mon Sep 19 17:27:08 2022 : Debug: ssl : 1.1.1f release Mon Sep 19 17:27:08 2022 : Debug: Endianness: Mon Sep 19 17:27:08 2022 : Debug: little Mon Sep 19 17:27:08 2022 : Debug: Compilation flags: Mon Sep 19 17:27:08 2022 : Debug: cppflags : -Wdate-time -D_FORTIFY_SOURCE=2 Mon Sep 19 17:27:08 2022 : Debug: cflags : -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -g -O2 -fdebug-prefix-map=/radsec/freeradius-server=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -O2 -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1 Mon Sep 19 17:27:08 2022 : Debug: ldflags : -Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now Mon Sep 19 17:27:08 2022 : Debug: libs : -lcrypto -lssl -ltalloc -latomic -lcap -lnsl -lresolv -ldl -lpthread -lreadline Mon Sep 19 17:27:08 2022 : Debug: Mon Sep 19 17:27:08 2022 : Info: FreeRADIUS Version 3.0.26 Mon Sep 19 17:27:08 2022 : Info: Copyright (C) 1999-2021 The FreeRADIUS server project and contributors Mon Sep 19 17:27:08 2022 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Mon Sep 19 17:27:08 2022 : Info: PARTICULAR PURPOSE Mon Sep 19 17:27:08 2022 : Info: You may redistribute copies of FreeRADIUS under the terms of the Mon Sep 19 17:27:08 2022 : Info: GNU General Public License Mon Sep 19 17:27:08 2022 : Info: For more information about these matters, see the file named COPYRIGHT Mon Sep 19 17:27:08 2022 : Info: Starting - reading configuration files ... Mon Sep 19 17:27:08 2022 : Debug: including dictionary file /usr/share/freeradius/dictionary Mon Sep 19 17:27:08 2022 : Debug: including dictionary file /usr/share/freeradius/dictionary.dhcp Mon Sep 19 17:27:08 2022 : Debug: including dictionary file /usr/share/freeradius/dictionary.vqp Mon Sep 19 17:27:08 2022 : Debug: including dictionary file /etc/freeradius/dictionary Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/radiusd.conf Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/proxy.conf Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/clients.conf Mon Sep 19 17:27:08 2022 : Debug: including files in directory /etc/freeradius/mods-enabled/ Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/replicate Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/unpack Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/exec Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/detail Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/pap Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/chap Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/ntlm_auth Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/radutmp Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/sradutmp Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/expr Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/detail.log Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/utf8 Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/expiration Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/unix Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/dynamic_clients Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/mschap Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/files Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/totp Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/logintime Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/passwd Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/echo Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/preprocess Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/soh Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/linelog Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/digest Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/mods-enabled/date Mon Sep 19 17:27:08 2022 : Debug: including files in directory /etc/freeradius/policy.d/ Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/filter Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/eap Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/moonshot-targeted-ids Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/abfab-tr Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/debug Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/canonicalization Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/control Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/rfc7542 Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/cui Mon Sep 19 17:27:08 2022 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Mon Sep 19 17:27:08 2022 : Debug: OPTIMIZING (no == yes) --> FALSE Mon Sep 19 17:27:08 2022 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Mon Sep 19 17:27:08 2022 : Debug: OPTIMIZING (no == yes) --> FALSE Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/dhcp Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/accounting Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/policy.d/operator-name Mon Sep 19 17:27:08 2022 : Debug: including files in directory /etc/freeradius/sites-enabled/ Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/sites-enabled/tcpServer Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/clients.conf Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/sites-enabled/passpoint Mon Sep 19 17:27:08 2022 : Debug: including configuration file /etc/freeradius/clients.conf Mon Sep 19 17:27:08 2022 : Debug: main { Mon Sep 19 17:27:08 2022 : Debug: security { Mon Sep 19 17:27:08 2022 : Debug: user = "freerad" Mon Sep 19 17:27:08 2022 : Debug: group = "freerad" Mon Sep 19 17:27:08 2022 : Debug: allow_core_dumps = yes Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[484]: The item 'max_attributes' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[502]: The item 'reject_delay' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[522]: The item 'status_server' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Debug: } Mon Sep 19 17:27:08 2022 : Debug: name = "freeradius" Mon Sep 19 17:27:08 2022 : Debug: prefix = "/usr" Mon Sep 19 17:27:08 2022 : Debug: localstatedir = "/var" Mon Sep 19 17:27:08 2022 : Debug: logdir = "/var/log/freeradius" Mon Sep 19 17:27:08 2022 : Debug: run_dir = "/var/run/freeradius" Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[55]: The item 'sysconfdir' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[67]: The item 'confdir' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[70]: The item 'cadir' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[73]: The item 'secretKey' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[74]: The item 'greEndpointIp' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[80]: The item 'db_dir' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[83]: The item 'eapCorrEnabled' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[86]: The item 'accountingServer' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[87]: The item 'accountingServerEnabled' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[120]: The item 'libdir' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[131]: The item 'pidfile' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[152]: The item 'correct_escapes' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[206]: The item 'max_request_time' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[225]: The item 'cleanup_delay' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[244]: The item 'max_requests' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[262]: The item 'hostname_lookups' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[268]: The item 'regular_expressions' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[269]: The item 'extended_expressions' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[272]: The item 'delete_blocked_requests' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[394]: The item 'checkrad' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[527]: The item 'usercollide' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[530]: The item 'lower_user' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[531]: The item 'lower_pass' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[532]: The item 'nospace_user' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[533]: The item 'nospace_pass' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[552]: The item 'proxy_requests' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Debug: } Mon Sep 19 17:27:08 2022 : Info: Core dumps are enabled Mon Sep 19 17:27:08 2022 : Debug: main { Mon Sep 19 17:27:08 2022 : Debug: name = "freeradius" Mon Sep 19 17:27:08 2022 : Debug: prefix = "/usr" Mon Sep 19 17:27:08 2022 : Debug: localstatedir = "/var" Mon Sep 19 17:27:08 2022 : Debug: sbindir = "/usr/sbin" Mon Sep 19 17:27:08 2022 : Debug: logdir = "/var/log/freeradius" Mon Sep 19 17:27:08 2022 : Debug: run_dir = "/var/run/freeradius" Mon Sep 19 17:27:08 2022 : Debug: libdir = "/usr/lib/freeradius" Mon Sep 19 17:27:08 2022 : Debug: radacctdir = "/var/log/freeradius/radacct" Mon Sep 19 17:27:08 2022 : Debug: hostname_lookups = no Mon Sep 19 17:27:08 2022 : Debug: max_request_time = 30 Mon Sep 19 17:27:08 2022 : Debug: cleanup_delay = 5 Mon Sep 19 17:27:08 2022 : Debug: max_requests = 16384 Mon Sep 19 17:27:08 2022 : Debug: postauth_client_lost = no Mon Sep 19 17:27:08 2022 : Debug: pidfile = "/var/run/freeradius/freeradius.pid" Mon Sep 19 17:27:08 2022 : Debug: checkrad = "/usr/sbin/checkrad" Mon Sep 19 17:27:08 2022 : Debug: debug_level = 0 Mon Sep 19 17:27:08 2022 : Debug: proxy_requests = yes Mon Sep 19 17:27:08 2022 : Debug: log { Mon Sep 19 17:27:08 2022 : Debug: stripped_names = no Mon Sep 19 17:27:08 2022 : Debug: auth = yes Mon Sep 19 17:27:08 2022 : Debug: auth_badpass = no Mon Sep 19 17:27:08 2022 : Debug: auth_goodpass = no Mon Sep 19 17:27:08 2022 : Debug: colourise = yes Mon Sep 19 17:27:08 2022 : Debug: msg_denied = "You are already logged in - access denied" Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[290]: The item 'destination' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[307]: The item 'file' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[353]: The item 'syslog_facility' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Debug: } Mon Sep 19 17:27:08 2022 : Debug: resources { Mon Sep 19 17:27:08 2022 : Debug: } Mon Sep 19 17:27:08 2022 : Debug: security { Mon Sep 19 17:27:08 2022 : Debug: max_attributes = 200 Mon Sep 19 17:27:08 2022 : Debug: reject_delay = 1.000000 Mon Sep 19 17:27:08 2022 : Debug: status_server = yes Mon Sep 19 17:27:08 2022 : Debug: } Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[55]: The item 'sysconfdir' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[67]: The item 'confdir' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[70]: The item 'cadir' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[73]: The item 'secretKey' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[74]: The item 'greEndpointIp' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[80]: The item 'db_dir' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[83]: The item 'eapCorrEnabled' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[86]: The item 'accountingServer' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[87]: The item 'accountingServerEnabled' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[152]: The item 'correct_escapes' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[268]: The item 'regular_expressions' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[269]: The item 'extended_expressions' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[272]: The item 'delete_blocked_requests' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[527]: The item 'usercollide' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[530]: The item 'lower_user' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[531]: The item 'lower_pass' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[532]: The item 'nospace_user' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/radiusd.conf[533]: The item 'nospace_pass' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Debug: } Mon Sep 19 17:27:08 2022 : Debug: radiusd: #### Loading Realms and Home Servers #### Mon Sep 19 17:27:08 2022 : Debug: proxy server { Mon Sep 19 17:27:08 2022 : Debug: retry_delay = 5 Mon Sep 19 17:27:08 2022 : Debug: retry_count = 3 Mon Sep 19 17:27:08 2022 : Debug: default_fallback = no Mon Sep 19 17:27:08 2022 : Debug: dead_time = 120 Mon Sep 19 17:27:08 2022 : Debug: wake_all_if_all_dead = no Mon Sep 19 17:27:08 2022 : Warning: /etc/freeradius/proxy.conf[5]: The item 'post_proxy_authorize' is defined, but is unused by the configuration Mon Sep 19 17:27:08 2022 : Debug: } Mon Sep 19 17:27:08 2022 : Debug: home_server testHome { Mon Sep 19 17:27:13 2022 : Debug: ipaddr = testHome IPv4 address [216.58.255.72] Mon Sep 19 17:27:13 2022 : Debug: port = 2017 Mon Sep 19 17:27:13 2022 : Debug: type = "auth" Mon Sep 19 17:27:13 2022 : Debug: proto = "tcp" Mon Sep 19 17:27:13 2022 : Debug: secret = "testsecret" Mon Sep 19 17:27:13 2022 : Debug: response_window = 30.000000 Mon Sep 19 17:27:13 2022 : Debug: response_timeouts = 1 Mon Sep 19 17:27:13 2022 : Debug: max_outstanding = 65536 Mon Sep 19 17:27:13 2022 : Debug: zombie_period = 20 Mon Sep 19 17:27:13 2022 : Debug: status_check = "none" Mon Sep 19 17:27:13 2022 : Debug: ping_interval = 30 Mon Sep 19 17:27:13 2022 : Debug: check_timeout = 4 Mon Sep 19 17:27:13 2022 : Debug: num_answers_to_alive = 3 Mon Sep 19 17:27:13 2022 : Debug: revive_interval = 60 Mon Sep 19 17:27:13 2022 : Debug: limit { Mon Sep 19 17:27:13 2022 : Debug: max_connections = 16 Mon Sep 19 17:27:13 2022 : Debug: max_requests = 0 Mon Sep 19 17:27:13 2022 : Debug: lifetime = 0 Mon Sep 19 17:27:13 2022 : Debug: idle_timeout = 480 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: coa { Mon Sep 19 17:27:13 2022 : Debug: irt = 2 Mon Sep 19 17:27:13 2022 : Debug: mrt = 16 Mon Sep 19 17:27:13 2022 : Debug: mrc = 5 Mon Sep 19 17:27:13 2022 : Debug: mrd = 30 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Warning: Ignoring "zombie_period = 20", forcing to "zombie_period = 30" Mon Sep 19 17:27:13 2022 : Debug: home_server testHome2 { Mon Sep 19 17:27:13 2022 : Debug: ipaddr = testHome2 IPv4 address [216.58.255.69] Mon Sep 19 17:27:13 2022 : Debug: port = 2017 Mon Sep 19 17:27:13 2022 : Debug: type = "auth" Mon Sep 19 17:27:13 2022 : Debug: proto = "tcp" Mon Sep 19 17:27:13 2022 : Debug: secret = "testsecret" Mon Sep 19 17:27:13 2022 : Debug: response_window = 30.000000 Mon Sep 19 17:27:13 2022 : Debug: response_timeouts = 1 Mon Sep 19 17:27:13 2022 : Debug: max_outstanding = 65536 Mon Sep 19 17:27:13 2022 : Debug: zombie_period = 20 Mon Sep 19 17:27:13 2022 : Debug: status_check = "none" Mon Sep 19 17:27:13 2022 : Debug: ping_interval = 30 Mon Sep 19 17:27:13 2022 : Debug: check_timeout = 4 Mon Sep 19 17:27:13 2022 : Debug: num_answers_to_alive = 3 Mon Sep 19 17:27:13 2022 : Debug: revive_interval = 60 Mon Sep 19 17:27:13 2022 : Debug: limit { Mon Sep 19 17:27:13 2022 : Debug: max_connections = 16 Mon Sep 19 17:27:13 2022 : Debug: max_requests = 0 Mon Sep 19 17:27:13 2022 : Debug: lifetime = 0 Mon Sep 19 17:27:13 2022 : Debug: idle_timeout = 480 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: coa { Mon Sep 19 17:27:13 2022 : Debug: irt = 2 Mon Sep 19 17:27:13 2022 : Debug: mrt = 16 Mon Sep 19 17:27:13 2022 : Debug: mrc = 5 Mon Sep 19 17:27:13 2022 : Debug: mrd = 30 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Warning: Ignoring "zombie_period = 20", forcing to "zombie_period = 30" Mon Sep 19 17:27:13 2022 : Debug: home_server testHome3 { Mon Sep 19 17:27:13 2022 : Debug: ipaddr = testHome3 IPv4 address [216.58.255.70] Mon Sep 19 17:27:13 2022 : Debug: port = 2017 Mon Sep 19 17:27:13 2022 : Debug: type = "auth" Mon Sep 19 17:27:13 2022 : Debug: proto = "tcp" Mon Sep 19 17:27:13 2022 : Debug: secret = "testsecret" Mon Sep 19 17:27:13 2022 : Debug: response_window = 30.000000 Mon Sep 19 17:27:13 2022 : Debug: response_timeouts = 1 Mon Sep 19 17:27:13 2022 : Debug: max_outstanding = 65536 Mon Sep 19 17:27:13 2022 : Debug: zombie_period = 20 Mon Sep 19 17:27:13 2022 : Debug: status_check = "none" Mon Sep 19 17:27:13 2022 : Debug: ping_interval = 30 Mon Sep 19 17:27:13 2022 : Debug: check_timeout = 4 Mon Sep 19 17:27:13 2022 : Debug: num_answers_to_alive = 3 Mon Sep 19 17:27:13 2022 : Debug: revive_interval = 60 Mon Sep 19 17:27:13 2022 : Debug: limit { Mon Sep 19 17:27:13 2022 : Debug: max_connections = 16 Mon Sep 19 17:27:13 2022 : Debug: max_requests = 0 Mon Sep 19 17:27:13 2022 : Debug: lifetime = 0 Mon Sep 19 17:27:13 2022 : Debug: idle_timeout = 480 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: coa { Mon Sep 19 17:27:13 2022 : Debug: irt = 2 Mon Sep 19 17:27:13 2022 : Debug: mrt = 16 Mon Sep 19 17:27:13 2022 : Debug: mrc = 5 Mon Sep 19 17:27:13 2022 : Debug: mrd = 30 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Warning: Ignoring "zombie_period = 20", forcing to "zombie_period = 30" Mon Sep 19 17:27:13 2022 : Debug: home_server_pool passpoint { Mon Sep 19 17:27:13 2022 : Debug: type = keyed-balance Mon Sep 19 17:27:13 2022 : Debug: home_server = testHome2 Mon Sep 19 17:27:13 2022 : Debug: home_server = testHome2 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: realm to_datacenter_passpoint_auth { Mon Sep 19 17:27:13 2022 : Debug: auth_pool = passpoint Mon Sep 19 17:27:13 2022 : Debug: nostrip Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: radiusd: #### Loading Clients #### Mon Sep 19 17:27:13 2022 : Debug: client tcpClient { Mon Sep 19 17:27:13 2022 : Debug: ipaddr = 216.58.255.0/24 Mon Sep 19 17:27:13 2022 : Debug: require_message_authenticator = no Mon Sep 19 17:27:13 2022 : Debug: secret = "testsecret" Mon Sep 19 17:27:13 2022 : Debug: proto = "tcp" Mon Sep 19 17:27:13 2022 : Debug: limit { Mon Sep 19 17:27:13 2022 : Debug: max_connections = 16 Mon Sep 19 17:27:13 2022 : Debug: lifetime = 0 Mon Sep 19 17:27:13 2022 : Debug: idle_timeout = 30 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Adding client 216.58.255.0/24 (216.58.255.0) to prefix tree 24 Mon Sep 19 17:27:13 2022 : Info: Debug state unknown (cap_sys_ptrace capability not set) Mon Sep 19 17:27:13 2022 : Info: systemd watchdog is disabled Mon Sep 19 17:27:13 2022 : Debug: # Creating Auth-Type = OK Mon Sep 19 17:27:13 2022 : Debug: # Creating Auth-Type = EAP Mon Sep 19 17:27:13 2022 : Debug: radiusd: #### Instantiating modules #### Mon Sep 19 17:27:13 2022 : Debug: modules { Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_replicate with path: /usr/lib/freeradius/rlm_replicate.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_replicate, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_replicate Mon Sep 19 17:27:13 2022 : Debug: # Loading module "replicate" from file /etc/freeradius/mods-enabled/replicate Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_unpack with path: /usr/lib/freeradius/rlm_unpack.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_unpack, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_unpack Mon Sep 19 17:27:13 2022 : Debug: # Loading module "unpack" from file /etc/freeradius/mods-enabled/unpack Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_exec with path: /usr/lib/freeradius/rlm_exec.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_exec, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_exec Mon Sep 19 17:27:13 2022 : Debug: # Loading module "exec" from file /etc/freeradius/mods-enabled/exec Mon Sep 19 17:27:13 2022 : Debug: exec { Mon Sep 19 17:27:13 2022 : Debug: wait = no Mon Sep 19 17:27:13 2022 : Debug: input_pairs = "request" Mon Sep 19 17:27:13 2022 : Debug: shell_escape = yes Mon Sep 19 17:27:13 2022 : Debug: timeout = 10 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_detail with path: /usr/lib/freeradius/rlm_detail.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_detail, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_detail Mon Sep 19 17:27:13 2022 : Debug: # Loading module "detail" from file /etc/freeradius/mods-enabled/detail Mon Sep 19 17:27:13 2022 : Debug: detail { Mon Sep 19 17:27:13 2022 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" Mon Sep 19 17:27:13 2022 : Debug: header = "%t" Mon Sep 19 17:27:13 2022 : Debug: permissions = 384 Mon Sep 19 17:27:13 2022 : Debug: locking = no Mon Sep 19 17:27:13 2022 : Debug: escape_filenames = no Mon Sep 19 17:27:13 2022 : Debug: log_packet_header = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_pap with path: /usr/lib/freeradius/rlm_pap.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_pap, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_pap Mon Sep 19 17:27:13 2022 : Debug: # Loading module "pap" from file /etc/freeradius/mods-enabled/pap Mon Sep 19 17:27:13 2022 : Debug: pap { Mon Sep 19 17:27:13 2022 : Debug: normalise = yes Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_chap with path: /usr/lib/freeradius/rlm_chap.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_chap, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_chap Mon Sep 19 17:27:13 2022 : Debug: # Loading module "chap" from file /etc/freeradius/mods-enabled/chap Mon Sep 19 17:27:13 2022 : Debug: # Loading module "ntlm_auth" from file /etc/freeradius/mods-enabled/ntlm_auth Mon Sep 19 17:27:13 2022 : Debug: exec ntlm_auth { Mon Sep 19 17:27:13 2022 : Debug: wait = yes Mon Sep 19 17:27:13 2022 : Debug: program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" Mon Sep 19 17:27:13 2022 : Debug: shell_escape = yes Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_radutmp with path: /usr/lib/freeradius/rlm_radutmp.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_radutmp, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_radutmp Mon Sep 19 17:27:13 2022 : Debug: # Loading module "radutmp" from file /etc/freeradius/mods-enabled/radutmp Mon Sep 19 17:27:13 2022 : Debug: radutmp { Mon Sep 19 17:27:13 2022 : Debug: filename = "/var/log/freeradius/radutmp" Mon Sep 19 17:27:13 2022 : Debug: username = "%{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: case_sensitive = yes Mon Sep 19 17:27:13 2022 : Debug: check_with_nas = yes Mon Sep 19 17:27:13 2022 : Debug: permissions = 384 Mon Sep 19 17:27:13 2022 : Debug: caller_id = yes Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "sradutmp" from file /etc/freeradius/mods-enabled/sradutmp Mon Sep 19 17:27:13 2022 : Debug: radutmp sradutmp { Mon Sep 19 17:27:13 2022 : Debug: filename = "/var/log/freeradius/sradutmp" Mon Sep 19 17:27:13 2022 : Debug: username = "%{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: case_sensitive = yes Mon Sep 19 17:27:13 2022 : Debug: check_with_nas = yes Mon Sep 19 17:27:13 2022 : Debug: permissions = 420 Mon Sep 19 17:27:13 2022 : Debug: caller_id = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_realm with path: /usr/lib/freeradius/rlm_realm.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_realm, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_realm Mon Sep 19 17:27:13 2022 : Debug: # Loading module "IPASS" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: realm IPASS { Mon Sep 19 17:27:13 2022 : Debug: format = "prefix" Mon Sep 19 17:27:13 2022 : Debug: delimiter = "/" Mon Sep 19 17:27:13 2022 : Debug: ignore_default = no Mon Sep 19 17:27:13 2022 : Debug: ignore_null = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "suffix" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: realm suffix { Mon Sep 19 17:27:13 2022 : Debug: format = "suffix" Mon Sep 19 17:27:13 2022 : Debug: delimiter = "@" Mon Sep 19 17:27:13 2022 : Debug: ignore_default = no Mon Sep 19 17:27:13 2022 : Debug: ignore_null = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "bangpath" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: realm bangpath { Mon Sep 19 17:27:13 2022 : Debug: format = "prefix" Mon Sep 19 17:27:13 2022 : Debug: delimiter = "!" Mon Sep 19 17:27:13 2022 : Debug: ignore_default = no Mon Sep 19 17:27:13 2022 : Debug: ignore_null = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "realmpercent" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: realm realmpercent { Mon Sep 19 17:27:13 2022 : Debug: format = "suffix" Mon Sep 19 17:27:13 2022 : Debug: delimiter = "%" Mon Sep 19 17:27:13 2022 : Debug: ignore_default = no Mon Sep 19 17:27:13 2022 : Debug: ignore_null = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "ntdomain" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: realm ntdomain { Mon Sep 19 17:27:13 2022 : Debug: format = "prefix" Mon Sep 19 17:27:13 2022 : Debug: delimiter = "\\" Mon Sep 19 17:27:13 2022 : Debug: ignore_default = no Mon Sep 19 17:27:13 2022 : Debug: ignore_null = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_expr with path: /usr/lib/freeradius/rlm_expr.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_expr, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_expr Mon Sep 19 17:27:13 2022 : Debug: # Loading module "expr" from file /etc/freeradius/mods-enabled/expr Mon Sep 19 17:27:13 2022 : Debug: expr { Mon Sep 19 17:27:13 2022 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "auth_log" from file /etc/freeradius/mods-enabled/detail.log Mon Sep 19 17:27:13 2022 : Debug: detail auth_log { Mon Sep 19 17:27:13 2022 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" Mon Sep 19 17:27:13 2022 : Debug: header = "%t" Mon Sep 19 17:27:13 2022 : Debug: permissions = 384 Mon Sep 19 17:27:13 2022 : Debug: locking = no Mon Sep 19 17:27:13 2022 : Debug: escape_filenames = no Mon Sep 19 17:27:13 2022 : Debug: log_packet_header = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "reply_log" from file /etc/freeradius/mods-enabled/detail.log Mon Sep 19 17:27:13 2022 : Debug: detail reply_log { Mon Sep 19 17:27:13 2022 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" Mon Sep 19 17:27:13 2022 : Debug: header = "%t" Mon Sep 19 17:27:13 2022 : Debug: permissions = 384 Mon Sep 19 17:27:13 2022 : Debug: locking = no Mon Sep 19 17:27:13 2022 : Debug: escape_filenames = no Mon Sep 19 17:27:13 2022 : Debug: log_packet_header = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "pre_proxy_log" from file /etc/freeradius/mods-enabled/detail.log Mon Sep 19 17:27:13 2022 : Debug: detail pre_proxy_log { Mon Sep 19 17:27:13 2022 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" Mon Sep 19 17:27:13 2022 : Debug: header = "%t" Mon Sep 19 17:27:13 2022 : Debug: permissions = 384 Mon Sep 19 17:27:13 2022 : Debug: locking = no Mon Sep 19 17:27:13 2022 : Debug: escape_filenames = no Mon Sep 19 17:27:13 2022 : Debug: log_packet_header = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "post_proxy_log" from file /etc/freeradius/mods-enabled/detail.log Mon Sep 19 17:27:13 2022 : Debug: detail post_proxy_log { Mon Sep 19 17:27:13 2022 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" Mon Sep 19 17:27:13 2022 : Debug: header = "%t" Mon Sep 19 17:27:13 2022 : Debug: permissions = 384 Mon Sep 19 17:27:13 2022 : Debug: locking = no Mon Sep 19 17:27:13 2022 : Debug: escape_filenames = no Mon Sep 19 17:27:13 2022 : Debug: log_packet_header = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_attr_filter with path: /usr/lib/freeradius/rlm_attr_filter.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_attr_filter, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_attr_filter Mon Sep 19 17:27:13 2022 : Debug: # Loading module "attr_filter.post-proxy" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: attr_filter attr_filter.post-proxy { Mon Sep 19 17:27:13 2022 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/post-proxy" Mon Sep 19 17:27:13 2022 : Debug: key = "%{Realm}" Mon Sep 19 17:27:13 2022 : Debug: relaxed = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "attr_filter.pre-proxy" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: attr_filter attr_filter.pre-proxy { Mon Sep 19 17:27:13 2022 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/pre-proxy" Mon Sep 19 17:27:13 2022 : Debug: key = "%{Realm}" Mon Sep 19 17:27:13 2022 : Debug: relaxed = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "attr_filter.access_reject" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: attr_filter attr_filter.access_reject { Mon Sep 19 17:27:13 2022 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/access_reject" Mon Sep 19 17:27:13 2022 : Debug: key = "%{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: relaxed = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "attr_filter.access_challenge" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: attr_filter attr_filter.access_challenge { Mon Sep 19 17:27:13 2022 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/access_challenge" Mon Sep 19 17:27:13 2022 : Debug: key = "%{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: relaxed = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "attr_filter.accounting_response" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: attr_filter attr_filter.accounting_response { Mon Sep 19 17:27:13 2022 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/accounting_response" Mon Sep 19 17:27:13 2022 : Debug: key = "%{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: relaxed = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "attr_filter.coa" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: attr_filter attr_filter.coa { Mon Sep 19 17:27:13 2022 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/coa" Mon Sep 19 17:27:13 2022 : Debug: key = "%{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: relaxed = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_utf8 with path: /usr/lib/freeradius/rlm_utf8.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_utf8, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_utf8 Mon Sep 19 17:27:13 2022 : Debug: # Loading module "utf8" from file /etc/freeradius/mods-enabled/utf8 Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_expiration with path: /usr/lib/freeradius/rlm_expiration.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_expiration, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_expiration Mon Sep 19 17:27:13 2022 : Debug: # Loading module "expiration" from file /etc/freeradius/mods-enabled/expiration Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_unix with path: /usr/lib/freeradius/rlm_unix.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_unix, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_unix Mon Sep 19 17:27:13 2022 : Debug: # Loading module "unix" from file /etc/freeradius/mods-enabled/unix Mon Sep 19 17:27:13 2022 : Debug: unix { Mon Sep 19 17:27:13 2022 : Debug: radwtmp = "/var/log/freeradius/radwtmp" Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Creating attribute Unix-Group Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_dynamic_clients with path: /usr/lib/freeradius/rlm_dynamic_clients.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_dynamic_clients, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_dynamic_clients Mon Sep 19 17:27:13 2022 : Debug: # Loading module "dynamic_clients" from file /etc/freeradius/mods-enabled/dynamic_clients Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_mschap with path: /usr/lib/freeradius/rlm_mschap.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_mschap, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_mschap Mon Sep 19 17:27:13 2022 : Debug: # Loading module "mschap" from file /etc/freeradius/mods-enabled/mschap Mon Sep 19 17:27:13 2022 : Debug: mschap { Mon Sep 19 17:27:13 2022 : Debug: use_mppe = yes Mon Sep 19 17:27:13 2022 : Debug: require_encryption = no Mon Sep 19 17:27:13 2022 : Debug: require_strong = no Mon Sep 19 17:27:13 2022 : Debug: with_ntdomain_hack = yes Mon Sep 19 17:27:13 2022 : Debug: passchange { Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: allow_retry = yes Mon Sep 19 17:27:13 2022 : Debug: winbind_retry_with_normalised_username = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_files with path: /usr/lib/freeradius/rlm_files.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_files, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_files Mon Sep 19 17:27:13 2022 : Debug: # Loading module "files" from file /etc/freeradius/mods-enabled/files Mon Sep 19 17:27:13 2022 : Debug: files { Mon Sep 19 17:27:13 2022 : Debug: filename = "/etc/freeradius/mods-config/files/authorize" Mon Sep 19 17:27:13 2022 : Debug: acctusersfile = "/etc/freeradius/mods-config/files/accounting" Mon Sep 19 17:27:13 2022 : Debug: preproxy_usersfile = "/etc/freeradius/mods-config/files/pre-proxy" Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_always with path: /usr/lib/freeradius/rlm_always.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_always, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_always Mon Sep 19 17:27:13 2022 : Debug: # Loading module "reject" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: always reject { Mon Sep 19 17:27:13 2022 : Debug: rcode = "reject" Mon Sep 19 17:27:13 2022 : Debug: simulcount = 0 Mon Sep 19 17:27:13 2022 : Debug: mpp = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "fail" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: always fail { Mon Sep 19 17:27:13 2022 : Debug: rcode = "fail" Mon Sep 19 17:27:13 2022 : Debug: simulcount = 0 Mon Sep 19 17:27:13 2022 : Debug: mpp = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "ok" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: always ok { Mon Sep 19 17:27:13 2022 : Debug: rcode = "ok" Mon Sep 19 17:27:13 2022 : Debug: simulcount = 0 Mon Sep 19 17:27:13 2022 : Debug: mpp = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "handled" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: always handled { Mon Sep 19 17:27:13 2022 : Debug: rcode = "handled" Mon Sep 19 17:27:13 2022 : Debug: simulcount = 0 Mon Sep 19 17:27:13 2022 : Debug: mpp = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "invalid" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: always invalid { Mon Sep 19 17:27:13 2022 : Debug: rcode = "invalid" Mon Sep 19 17:27:13 2022 : Debug: simulcount = 0 Mon Sep 19 17:27:13 2022 : Debug: mpp = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "userlock" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: always userlock { Mon Sep 19 17:27:13 2022 : Debug: rcode = "userlock" Mon Sep 19 17:27:13 2022 : Debug: simulcount = 0 Mon Sep 19 17:27:13 2022 : Debug: mpp = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "notfound" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: always notfound { Mon Sep 19 17:27:13 2022 : Debug: rcode = "notfound" Mon Sep 19 17:27:13 2022 : Debug: simulcount = 0 Mon Sep 19 17:27:13 2022 : Debug: mpp = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "noop" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: always noop { Mon Sep 19 17:27:13 2022 : Debug: rcode = "noop" Mon Sep 19 17:27:13 2022 : Debug: simulcount = 0 Mon Sep 19 17:27:13 2022 : Debug: mpp = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "updated" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: always updated { Mon Sep 19 17:27:13 2022 : Debug: rcode = "updated" Mon Sep 19 17:27:13 2022 : Debug: simulcount = 0 Mon Sep 19 17:27:13 2022 : Debug: mpp = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_totp with path: /usr/lib/freeradius/rlm_totp.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_totp, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_totp Mon Sep 19 17:27:13 2022 : Debug: # Loading module "totp" from file /etc/freeradius/mods-enabled/totp Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_logintime with path: /usr/lib/freeradius/rlm_logintime.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_logintime, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_logintime Mon Sep 19 17:27:13 2022 : Debug: # Loading module "logintime" from file /etc/freeradius/mods-enabled/logintime Mon Sep 19 17:27:13 2022 : Debug: logintime { Mon Sep 19 17:27:13 2022 : Debug: minimum_timeout = 60 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_passwd with path: /usr/lib/freeradius/rlm_passwd.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_passwd, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_passwd Mon Sep 19 17:27:13 2022 : Debug: # Loading module "etc_passwd" from file /etc/freeradius/mods-enabled/passwd Mon Sep 19 17:27:13 2022 : Debug: passwd etc_passwd { Mon Sep 19 17:27:13 2022 : Debug: filename = "/etc/passwd" Mon Sep 19 17:27:13 2022 : Debug: format = "*User-Name:Crypt-Password:" Mon Sep 19 17:27:13 2022 : Debug: delimiter = ":" Mon Sep 19 17:27:13 2022 : Debug: ignore_nislike = no Mon Sep 19 17:27:13 2022 : Debug: ignore_empty = yes Mon Sep 19 17:27:13 2022 : Debug: allow_multiple_keys = no Mon Sep 19 17:27:13 2022 : Debug: hash_size = 100 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "echo" from file /etc/freeradius/mods-enabled/echo Mon Sep 19 17:27:13 2022 : Debug: exec echo { Mon Sep 19 17:27:13 2022 : Debug: wait = yes Mon Sep 19 17:27:13 2022 : Debug: program = "/bin/echo %{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: input_pairs = "request" Mon Sep 19 17:27:13 2022 : Debug: output_pairs = "reply" Mon Sep 19 17:27:13 2022 : Debug: shell_escape = yes Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_preprocess with path: /usr/lib/freeradius/rlm_preprocess.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_preprocess, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_preprocess Mon Sep 19 17:27:13 2022 : Debug: # Loading module "preprocess" from file /etc/freeradius/mods-enabled/preprocess Mon Sep 19 17:27:13 2022 : Debug: preprocess { Mon Sep 19 17:27:13 2022 : Debug: huntgroups = "/etc/freeradius/mods-config/preprocess/huntgroups" Mon Sep 19 17:27:13 2022 : Debug: hints = "/etc/freeradius/mods-config/preprocess/hints" Mon Sep 19 17:27:13 2022 : Debug: with_ascend_hack = no Mon Sep 19 17:27:13 2022 : Debug: ascend_channels_per_line = 23 Mon Sep 19 17:27:13 2022 : Debug: with_ntdomain_hack = no Mon Sep 19 17:27:13 2022 : Debug: with_specialix_jetstream_hack = no Mon Sep 19 17:27:13 2022 : Debug: with_cisco_vsa_hack = no Mon Sep 19 17:27:13 2022 : Debug: with_alvarion_vsa_hack = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_soh with path: /usr/lib/freeradius/rlm_soh.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_soh, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_soh Mon Sep 19 17:27:13 2022 : Debug: # Loading module "soh" from file /etc/freeradius/mods-enabled/soh Mon Sep 19 17:27:13 2022 : Debug: soh { Mon Sep 19 17:27:13 2022 : Debug: dhcp = yes Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_linelog with path: /usr/lib/freeradius/rlm_linelog.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_linelog, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_linelog Mon Sep 19 17:27:13 2022 : Debug: # Loading module "linelog" from file /etc/freeradius/mods-enabled/linelog Mon Sep 19 17:27:13 2022 : Debug: linelog { Mon Sep 19 17:27:13 2022 : Debug: filename = "/var/log/freeradius/linelog" Mon Sep 19 17:27:13 2022 : Debug: escape_filenames = no Mon Sep 19 17:27:13 2022 : Debug: syslog_severity = "info" Mon Sep 19 17:27:13 2022 : Debug: permissions = 384 Mon Sep 19 17:27:13 2022 : Debug: format = "This is a log message for %{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: reference = "messages.%{%{reply:Packet-Type}:-default}" Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "log_accounting" from file /etc/freeradius/mods-enabled/linelog Mon Sep 19 17:27:13 2022 : Debug: linelog log_accounting { Mon Sep 19 17:27:13 2022 : Debug: filename = "/var/log/freeradius/linelog-accounting" Mon Sep 19 17:27:13 2022 : Debug: escape_filenames = no Mon Sep 19 17:27:13 2022 : Debug: syslog_severity = "info" Mon Sep 19 17:27:13 2022 : Debug: permissions = 384 Mon Sep 19 17:27:13 2022 : Debug: format = "" Mon Sep 19 17:27:13 2022 : Debug: reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_digest with path: /usr/lib/freeradius/rlm_digest.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_digest, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_digest Mon Sep 19 17:27:13 2022 : Debug: # Loading module "digest" from file /etc/freeradius/mods-enabled/digest Mon Sep 19 17:27:13 2022 : Debug: Loading rlm_date with path: /usr/lib/freeradius/rlm_date.so Mon Sep 19 17:27:13 2022 : Debug: Loaded rlm_date, checking if it's valid Mon Sep 19 17:27:13 2022 : Debug: # Loaded module rlm_date Mon Sep 19 17:27:13 2022 : Debug: # Loading module "date" from file /etc/freeradius/mods-enabled/date Mon Sep 19 17:27:13 2022 : Debug: date { Mon Sep 19 17:27:13 2022 : Debug: format = "%b %e %Y %H:%M:%S %Z" Mon Sep 19 17:27:13 2022 : Debug: utc = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Loading module "wispr2date" from file /etc/freeradius/mods-enabled/date Mon Sep 19 17:27:13 2022 : Debug: date wispr2date { Mon Sep 19 17:27:13 2022 : Debug: format = "%Y-%m-%dT%H:%M:%S" Mon Sep 19 17:27:13 2022 : Debug: utc = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: instantiate { Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "detail" from file /etc/freeradius/mods-enabled/detail Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "pap" from file /etc/freeradius/mods-enabled/pap Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "IPASS" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "suffix" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "bangpath" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "realmpercent" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "ntdomain" from file /etc/freeradius/mods-enabled/realm Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "auth_log" from file /etc/freeradius/mods-enabled/detail.log Mon Sep 19 17:27:13 2022 : Debug: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "reply_log" from file /etc/freeradius/mods-enabled/detail.log Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "pre_proxy_log" from file /etc/freeradius/mods-enabled/detail.log Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "post_proxy_log" from file /etc/freeradius/mods-enabled/detail.log Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/post-proxy Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/pre-proxy Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "attr_filter.access_reject" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/access_reject Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/access_challenge Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/accounting_response Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "attr_filter.coa" from file /etc/freeradius/mods-enabled/attr_filter Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/coa Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "expiration" from file /etc/freeradius/mods-enabled/expiration Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "mschap" from file /etc/freeradius/mods-enabled/mschap Mon Sep 19 17:27:13 2022 : Debug: rlm_mschap (mschap): using internal authentication Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "files" from file /etc/freeradius/mods-enabled/files Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/files/authorize Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/files/accounting Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/files/pre-proxy Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "reject" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "fail" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "ok" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "handled" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "invalid" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "userlock" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "notfound" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "noop" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "updated" from file /etc/freeradius/mods-enabled/always Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "logintime" from file /etc/freeradius/mods-enabled/logintime Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "etc_passwd" from file /etc/freeradius/mods-enabled/passwd Mon Sep 19 17:27:13 2022 : Debug: rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "preprocess" from file /etc/freeradius/mods-enabled/preprocess Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/preprocess/huntgroups Mon Sep 19 17:27:13 2022 : Debug: reading pairlist file /etc/freeradius/mods-config/preprocess/hints Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "linelog" from file /etc/freeradius/mods-enabled/linelog Mon Sep 19 17:27:13 2022 : Debug: # Instantiating module "log_accounting" from file /etc/freeradius/mods-enabled/linelog Mon Sep 19 17:27:13 2022 : Debug: } # modules Mon Sep 19 17:27:13 2022 : Debug: radiusd: #### Loading Virtual Servers #### Mon Sep 19 17:27:13 2022 : Debug: server { # from file /etc/freeradius/radiusd.conf Mon Sep 19 17:27:13 2022 : Debug: } # server Mon Sep 19 17:27:13 2022 : Debug: server passpoint { # from file /etc/freeradius/sites-enabled/passpoint Mon Sep 19 17:27:13 2022 : Debug: authenticate { Mon Sep 19 17:27:13 2022 : Debug: Compiling Auth-Type OK for attr Auth-Type Mon Sep 19 17:27:13 2022 : Debug: group { Mon Sep 19 17:27:13 2022 : Debug: ok Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Compiling Auth-Type Reject for attr Auth-Type Mon Sep 19 17:27:13 2022 : Debug: group { Mon Sep 19 17:27:13 2022 : Debug: reject Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Compiling Auth-Type EAP for attr Auth-Type Mon Sep 19 17:27:13 2022 : Debug: group { Mon Sep 19 17:27:13 2022 : Debug: reject Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } # authenticate Mon Sep 19 17:27:13 2022 : Debug: authorize { Mon Sep 19 17:27:13 2022 : Warning: /etc/freeradius/sites-enabled/passpoint[76]: Please change attribute reference to '&Load-Balance-Key := ...' Mon Sep 19 17:27:13 2022 : Debug: update { Mon Sep 19 17:27:13 2022 : Debug: &control:Load-Balance-Key := "%{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: &control:Proxy-To-Realm := "to_datacenter_passpoint_auth" Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } # authorize Mon Sep 19 17:27:13 2022 : Debug: accounting { Mon Sep 19 17:27:13 2022 : Warning: /etc/freeradius/sites-enabled/passpoint[96]: Please change attribute reference to '&Load-Balance-Key := ...' Mon Sep 19 17:27:13 2022 : Debug: update { Mon Sep 19 17:27:13 2022 : Debug: &control:Load-Balance-Key := "%{User-Name}" Mon Sep 19 17:27:13 2022 : Debug: &control:Proxy-To-Realm := "to_datacenter_passpoint_acct" Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } # accounting Mon Sep 19 17:27:13 2022 : Debug: } # server passpoint Mon Sep 19 17:27:13 2022 : Debug: thread pool { Mon Sep 19 17:27:13 2022 : Debug: start_servers = 5 Mon Sep 19 17:27:13 2022 : Debug: max_servers = 256 Mon Sep 19 17:27:13 2022 : Debug: min_spare_servers = 3 Mon Sep 19 17:27:13 2022 : Debug: max_spare_servers = 10 Mon Sep 19 17:27:13 2022 : Debug: max_requests_per_server = 0 Mon Sep 19 17:27:13 2022 : Debug: cleanup_delay = 5 Mon Sep 19 17:27:13 2022 : Debug: max_queue_size = 65536 Mon Sep 19 17:27:13 2022 : Debug: auto_limit_acct = no Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Thread spawned new child 1. Total threads in pool: 1 Mon Sep 19 17:27:13 2022 : Debug: Thread 1 waiting to be assigned a request Mon Sep 19 17:27:13 2022 : Debug: Thread spawned new child 2. Total threads in pool: 2 Mon Sep 19 17:27:13 2022 : Debug: Thread spawned new child 3. Total threads in pool: 3 Mon Sep 19 17:27:13 2022 : Debug: Thread 3 waiting to be assigned a request Mon Sep 19 17:27:13 2022 : Debug: Thread spawned new child 4. Total threads in pool: 4 Mon Sep 19 17:27:13 2022 : Debug: Thread spawned new child 5. Total threads in pool: 5 Mon Sep 19 17:27:13 2022 : Debug: Thread pool initialized Mon Sep 19 17:27:13 2022 : Debug: Thread 4 waiting to be assigned a request Mon Sep 19 17:27:13 2022 : Debug: Thread 5 waiting to be assigned a request Mon Sep 19 17:27:13 2022 : Debug: Created signal pipe. Read end FD 5, write end FD 6 Mon Sep 19 17:27:13 2022 : Debug: radiusd: #### Opening IP addresses and Ports #### Mon Sep 19 17:27:13 2022 : Debug: Loading proto_auth with path: /usr/lib/freeradius/proto_auth.so Mon Sep 19 17:27:13 2022 : Debug: Loading proto_auth failed: /usr/lib/freeradius/proto_auth.so: cannot open shared object file: No such file or directory - No such file or directory Mon Sep 19 17:27:13 2022 : Debug: Thread 2 waiting to be assigned a request Mon Sep 19 17:27:13 2022 : Debug: Loading library using linker search path(s) Mon Sep 19 17:27:13 2022 : Debug: Defaults : /lib:/usr/lib Mon Sep 19 17:27:13 2022 : Debug: Failed with error: proto_auth.so: cannot open shared object file: No such file or directory Mon Sep 19 17:27:13 2022 : Debug: listen { Mon Sep 19 17:27:13 2022 : Debug: type = "auth" Mon Sep 19 17:27:13 2022 : Debug: virtual_server = "passpoint" Mon Sep 19 17:27:13 2022 : Debug: ipaddr = * Mon Sep 19 17:27:13 2022 : Debug: port = 2017 Mon Sep 19 17:27:13 2022 : Debug: proto = "tcp" Mon Sep 19 17:27:13 2022 : Debug: limit { Mon Sep 19 17:27:13 2022 : Debug: max_connections = 0 Mon Sep 19 17:27:13 2022 : Debug: lifetime = 0 Mon Sep 19 17:27:13 2022 : Debug: idle_timeout = 0 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: clients = "tcpclients" Mon Sep 19 17:27:13 2022 : Debug: client tcpClient { Mon Sep 19 17:27:13 2022 : Debug: ipaddr = 216.58.255.0/24 Mon Sep 19 17:27:13 2022 : Debug: require_message_authenticator = no Mon Sep 19 17:27:13 2022 : Debug: secret = "testsecret" Mon Sep 19 17:27:13 2022 : Debug: proto = "tcp" Mon Sep 19 17:27:13 2022 : Debug: limit { Mon Sep 19 17:27:13 2022 : Debug: max_connections = 16 Mon Sep 19 17:27:13 2022 : Debug: lifetime = 0 Mon Sep 19 17:27:13 2022 : Debug: idle_timeout = 30 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Adding client 216.58.255.0/24 (216.58.255.0) to prefix tree 24 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading proto_acct with path: /usr/lib/freeradius/proto_acct.so Mon Sep 19 17:27:13 2022 : Debug: Loading proto_acct failed: /usr/lib/freeradius/proto_acct.so: cannot open shared object file: No such file or directory - No such file or directory Mon Sep 19 17:27:13 2022 : Debug: Loading library using linker search path(s) Mon Sep 19 17:27:13 2022 : Debug: Defaults : /lib:/usr/lib Mon Sep 19 17:27:13 2022 : Debug: Failed with error: proto_acct.so: cannot open shared object file: No such file or directory Mon Sep 19 17:27:13 2022 : Debug: listen { Mon Sep 19 17:27:13 2022 : Debug: type = "acct" Mon Sep 19 17:27:13 2022 : Debug: virtual_server = "passpoint" Mon Sep 19 17:27:13 2022 : Debug: ipaddr = * Mon Sep 19 17:27:13 2022 : Debug: port = 2018 Mon Sep 19 17:27:13 2022 : Debug: proto = "tcp" Mon Sep 19 17:27:13 2022 : Debug: limit { Mon Sep 19 17:27:13 2022 : Debug: max_connections = 0 Mon Sep 19 17:27:13 2022 : Debug: lifetime = 0 Mon Sep 19 17:27:13 2022 : Debug: idle_timeout = 0 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: clients = "tcpclients" Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading proto_auth with path: /usr/lib/freeradius/proto_auth.so Mon Sep 19 17:27:13 2022 : Debug: Loading proto_auth failed: /usr/lib/freeradius/proto_auth.so: cannot open shared object file: No such file or directory - No such file or directory Mon Sep 19 17:27:13 2022 : Debug: Loading library using linker search path(s) Mon Sep 19 17:27:13 2022 : Debug: Defaults : /lib:/usr/lib Mon Sep 19 17:27:13 2022 : Debug: Failed with error: proto_auth.so: cannot open shared object file: No such file or directory Mon Sep 19 17:27:13 2022 : Debug: listen { Mon Sep 19 17:27:13 2022 : Debug: type = "auth" Mon Sep 19 17:27:13 2022 : Debug: ipaddr = * Mon Sep 19 17:27:13 2022 : Debug: port = 1817 Mon Sep 19 17:27:13 2022 : Debug: limit { Mon Sep 19 17:27:13 2022 : Debug: max_connections = 0 Mon Sep 19 17:27:13 2022 : Debug: lifetime = 0 Mon Sep 19 17:27:13 2022 : Debug: idle_timeout = 0 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Loading proto_acct with path: /usr/lib/freeradius/proto_acct.so Mon Sep 19 17:27:13 2022 : Debug: Loading proto_acct failed: /usr/lib/freeradius/proto_acct.so: cannot open shared object file: No such file or directory - No such file or directory Mon Sep 19 17:27:13 2022 : Debug: Loading library using linker search path(s) Mon Sep 19 17:27:13 2022 : Debug: Defaults : /lib:/usr/lib Mon Sep 19 17:27:13 2022 : Debug: Failed with error: proto_acct.so: cannot open shared object file: No such file or directory Mon Sep 19 17:27:13 2022 : Debug: listen { Mon Sep 19 17:27:13 2022 : Debug: type = "acct" Mon Sep 19 17:27:13 2022 : Debug: ipaddr = * Mon Sep 19 17:27:13 2022 : Debug: port = 1818 Mon Sep 19 17:27:13 2022 : Debug: limit { Mon Sep 19 17:27:13 2022 : Debug: max_connections = 16 Mon Sep 19 17:27:13 2022 : Debug: lifetime = 0 Mon Sep 19 17:27:13 2022 : Debug: idle_timeout = 30 Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: } Mon Sep 19 17:27:13 2022 : Debug: Listening on auth proto tcp address * port 2017 bound to server passpoint Mon Sep 19 17:27:13 2022 : Debug: Listening on acct proto tcp address * port 2018 bound to server passpoint Mon Sep 19 17:27:13 2022 : Debug: Listening on auth address * port 1817 bound to server passpoint Mon Sep 19 17:27:13 2022 : Debug: Listening on acct address * port 1818 bound to server passpoint Mon Sep 19 17:27:17 2022 : Debug: ... new connection request on TCP socket Mon Sep 19 17:27:17 2022 : Debug: Listening on acct from client (216.58.255.50, 42140) -> (*, 2018, virtual-server=passpoint) Mon Sep 19 17:27:17 2022 : Debug: Waking up in 0.3 seconds. Mon Sep 19 17:27:17 2022 : Debug: Client has closed connection Mon Sep 19 17:27:17 2022 : Info: ... shutting down socket acct from client (216.58.255.50, 42140) -> (*, 2018, virtual-server=passpoint) Mon Sep 19 17:27:17 2022 : Debug: Waking up in 2.9 seconds. Mon Sep 19 17:27:20 2022 : Debug: ... cleaning up socket acct from client (216.58.255.50, 42140) -> (*, 2018, virtual-server=passpoint) Mon Sep 19 17:27:25 2022 : Debug: ... new connection request on TCP socket Mon Sep 19 17:27:25 2022 : Error: Failed inserting TCP socket into parent list. Mon Sep 19 17:27:25 2022 : Debug: Listening on acct from client (216.58.255.50, 37328) -> (*, 2018, virtual-server=passpoint) Mon Sep 19 17:27:25 2022 : Debug: Waking up in 0.2 seconds. Mon Sep 19 17:27:25 2022 : Debug: Client has closed connection Mon Sep 19 17:27:25 2022 : Info: ... shutting down socket acct from client (216.58.255.50, 37328) -> (*, 2018, virtual-server=passpoint) Mon Sep 19 17:27:25 2022 : Debug: Waking up in 2.9 seconds. Mon Sep 19 17:27:28 2022 : Debug: ... cleaning up socket acct from client (216.58.255.50, 37328) -> (*, 2018, virtual-server=passpoint) Mon Sep 19 17:27:31 2022 : Debug: ... new connection request on TCP socket Mon Sep 19 17:27:31 2022 : Error: Failed inserting TCP socket into parent list. Mon Sep 19 17:27:31 2022 : Debug: Listening on acct from client (216.58.255.50, 54860) -> (*, 2018, virtual-server=passpoint) Mon Sep 19 17:27:31 2022 : Debug: Waking up in 0.7 seconds. Mon Sep 19 17:27:31 2022 : Debug: Client has closed connection Mon Sep 19 17:27:31 2022 : Info: ... shutting down socket acct from client (216.58.255.50, 54860) -> (*, 2018, virtual-server=passpoint) Mon Sep 19 17:27:31 2022 : Debug: Waking up in 2.9 seconds. Mon Sep 19 17:27:34 2022 : Debug: ... cleaning up socket acct from client (216.58.255.50, 54860) -> (*, 2018, virtual-server=passpoint) Regards, Abhilash

2 1

CRL updates not detected automatically
by Orion Poplawski 19 Sep '22

19 Sep '22

Hello - We are running freeradius on EL7/EL8 machines: freeradius-3.0.13-15.el7.x86_64 freeradius-3.0.20-12.module_el8.6.0+2865+fd6928c8.x86_64 and have just enabled CRL checking with `check_crl = yes` in mods-enabled/eap. We also have a script to update the CRL files - but radiusd seems to require a restart in order to load the new CRL. Is this expected? It seems rather problematic. Our certs directory looks like: lrwxrwxrwx. 1 root root 15 Sep 13 05:05 241bed0c.0 -> ad.nwra.com.crt lrwxrwxrwx. 1 root root 22 Sep 13 05:05 241bed0c.r0 -> ad-AD-SEATTLE01-CA.crl lrwxrwxrwx. 1 root root 10 Sep 13 05:05 599be2cf.0 -> ipa_ca.crt lrwxrwxrwx. 1 root root 7 Sep 13 05:05 599be2cf.r0 -> ipa.crl -rw-r--r--. 1 root radiusd 4850 Sep 19 08:20 ad-AD-SEATTLE01-CA.crl -rw-r-----. 1 root radiusd 2024 Sep 13 05:04 ad.nwra.com.crt -rw-r-----. 1 root radiusd 1276 Sep 13 05:04 ipa_ca.crt -rw-r--r--. 1 root radiusd 1507 Sep 19 08:20 ipa.crl Thanks, Orion -- Orion Poplawski IT Systems Manager 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 https://www.nwra.com/

2 1

Writing Modules: Get Debug Level
by g4-lisz＠tonarchiv.ch 17 Sep '22

17 Sep '22

Hi everyone I have a simple porgramming question: I want some program block only executed on a certain debug level, like: if (loglevel == LEVEL_DEBUG2) { calculate( &something ); DEBUG2(..., something); } Best reagrds, Till

1 1

Packet-Src-IP-Address in logs
by Brantley Padgett 16 Sep '22

16 Sep '22

I think what I'm seeing is just differences in versions, but wanted to get some expert opinions. I have an old Solaris system running radiusd: FreeRADIUS Version 3.0.11, for host sparc-sun-solaris2.11, built on Jul 14 2016 at 00:32:22 And a newly built Ubuntu system running the repo version radiusd: FreeRADIUS Version 3.0.20, for host x86_64-pc-linux-gnu, built on Apr 14 2022 at 20:32:00 On the Solaris, in the logs, I see logs that look more or less like ``` Fri Sep 16 15:16:03 2022 : Auth: (2303098) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [jimmy] (from client all_ipv4 port 9910 cli 112.217.164.107) Fri Sep 16 15:16:12 2022 : Auth: (2303099) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [gemeaux] (from client all_ipv4 port 13949 cli 184.168.126.75) Fri Sep 16 15:16:14 2022 : Auth: (2303100) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [root] (from client all_ipv4 port 13932 cli 209.141.59.116) ``` On Ubuntu, I see less detail ``` Fri Sep 16 08:49:02 2022 : Auth: (0) Login OK: [bpadgett] (from client all_ipv4 port 0) Fri Sep 16 09:15:01 2022 : Auth: (1) Login OK: [bpadgett] (from client all_ipv4 port 0) Fri Sep 16 09:15:06 2022 : Auth: (2) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [bpadgett] (from client all_ipv4 port 0) Fri Sep 16 09:15:10 2022 : Auth: (3) Login incorrect (ldap: Bind credentials incorrect: Invalid credentials): [bpadgett] (from client all_ipv4 port 0) ``` (those last two were me testing wrong info or blank) I am able to get the Packet-Src-IP-Address in msg_goodpass or msg_badpass, but I'm curious if there is a configuration I'm missing otherwise. The radiusd.conf used on Ubuntu is almost line for line identical since I used the Solaris config to build on. They both appear to have the same mods enabled and on the mods-available/detail and detail.log I don't see any differences. I know I can go with the msg_good/badpass option, I just want to make sure I'm not missing some crucial but simple option. The logging section of radiusd.conf: ``` log { destination = files colourise = yes file = ${logdir}/${name}.log syslog_facility = daemon # Log the full User-Name attribute, as it was found in the request. # # allowed values: {no, yes} # stripped_names = no # Log authentication requests to the log file. # # allowed values: {no, yes} # auth = yes # Log passwords with the authentication requests. # auth_badpass - logs password if it's rejected # auth_goodpass - logs password if it's correct # # allowed values: {no, yes} # auth_badpass = no auth_goodpass = no # The message when the user exceeds the Simultaneous-Use limit. # msg_denied = "You are already logged in - access denied" #msg_badpass = "testbad:%{Packet-Src-IP-Address}" #msg_goodpass = "testgood:%{Packet-Src-IP-Address}" } ``` Brantley Padgett The question is not how far. The question is, do you possess the constitution, the depth of faith, to go as far as is needed? -Boondock Saints

2 2

Mac Authentication
by Ashfaque Shaikh 16 Sep '22

16 Sep '22

Hi Team, Recently I have installed free radius server with daloradius GUI. I am trying to configure mac based authentication and for this I have added MAC address on daloradius server GUI in colon format. Now the problem I am facing is when my access point is sending MAC request to freeradius server it's getting rejected. When I am checking the debug logs in username MAC address is showing in plain format like 00224DD1042B this. Can anyone please help how I can achieve this mac authentication? Best Regards, Ashfaque Shaikh -- IDfy is recognized as one of Asia's Top 5 companies in ID verification, KYC and employee background screening. Join us <https://www.idfy.com/job-openings/>! *Corporate / Registered Office* 8th Floor, Skyline Icon, Andheri – Kurla Road, Chimatpada, Marol, Andheri East, Mumbai MH 400059 IN Website <https://www.idfy.com> | LinkedIn <https://www.linkedin.com/company/idfy/> | Instagram <https://www.instagram.com/we.are.idfy/> | Blog <https://www.idfy.com/blog/> | Contact Us <https://www.idfy.com/idfy-contact-us/> | Map <https://g.page/IDfy-mumbai?share> *CIN* U74900MH2011PTC291275 This message (including any attachments hereto) is confidential and is intended solely for the addressee. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this message in error, you are requested to delete it from your system and to contact the sender by replying to this message immediately. Baldor Technologies Private Limited is not liable for the improper transmission of this message nor for any damage sustained as a result of this message.

4 8

Help
by Ashfaque Shaikh 16 Sep '22

16 Sep '22

help Best Regards, Ashfaque Shaikh Manager IT +91-9867040873 IDfy.com -- IDfy is recognized as one of Asia's Top 5 companies in ID verification, KYC and employee background screening. Join us <https://www.idfy.com/job-openings/>! *Corporate / Registered Office* 8th Floor, Skyline Icon, Andheri – Kurla Road, Chimatpada, Marol, Andheri East, Mumbai MH 400059 IN Website <https://www.idfy.com> | LinkedIn <https://www.linkedin.com/company/idfy/> | Instagram <https://www.instagram.com/we.are.idfy/> | Blog <https://www.idfy.com/blog/> | Contact Us <https://www.idfy.com/idfy-contact-us/> | Map <https://g.page/IDfy-mumbai?share> *CIN* U74900MH2011PTC291275 This message (including any attachments hereto) is confidential and is intended solely for the addressee. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this message in error, you are requested to delete it from your system and to contact the sender by replying to this message immediately. Baldor Technologies Private Limited is not liable for the improper transmission of this message nor for any damage sustained as a result of this message.

1 0

Aruba Instant Captive Portal and EAP
by Evan Sharp 15 Sep '22

15 Sep '22

Hello! I am trying to configure FreeRADIUS to authenticate users on a guest SSID with Aruba's Instant virtual controller captive portal. The FreeRADIUS server is currently configured only to perform an EAP-TTLS/GTC 802.1X authentication for supplicants on the Aruba IAPs (as client) using a LDAPS lookup. What I have found comparing debug outputs from successful 802.1X binds with unsuccessful captive portal client requests is that the Aruba Instant controller does not specify an EAP type (EAP-message attribute) in the request; credentials are sent in plaintext. The server immediately rejects the bind because no other auth method than EAP-TTLS is configured. The Aruba Instant apparently cannot be configured to encrypt the captive portal request. My thought is that if I configured a secondary non-EAP authorization method, the FreeRADIUS could use it to process the captive portal requests. What auth method could work? How can I secure this so that FreeRADIUS only uses it for the captive portal requests? Thanks, Evan

2 1