- Freeradius-Users - lists.freeradius.org

LDAP, FreeRadius, Ruckus / Zone Director
by Steve Sheldon 24 Jun '20

24 Jun '20

Good Afternoon Folks, First Post Here. Hope everyone is doing well during this season of life we are all in. I have been struggling with a validation Auth issue from Ruckus wifi for a long time. I have poured through so many docs, trying to get this to work. My Setup: LDAP (jumpcloud), FreeRADIUS Version 3.0.16, Ubuntu (18.04), Ruckus (Zonedirector 1200 - 10.4.0.0 build 70) Group in LDAP users are members of: Wifiusers What works: 1. ldapsearch -H ldaps://ldap.jumpcloud.com:636 -x -b "ou=Users,o=orgid,dc=jumpcloud,dc=com" -D "uid=binduser,ou=Users,o=orgid,dc=jumpcloud,dc=com" -W "(objectClass=inetOrgPerson)” 2. radtest username userpassword 127.0.0.1 -1 testing123 - "Received Access-Accept" 3. ZoneDirector - Test Authentication/Accounting Servers Settings - enter in username/userpassword - " Success! The user will be assigned a role of "Default”.” What does’t Work: 1. From a computer accessing the configured wifi that has been setup to use my Authentication/Accounting Server. Help: 1. Would anyone be willing to share their "sites-available/default” settings or any other settings he or she used to get Ruckus Auth to work? I am hitting a dead end and any examples or help would greatly be appreciated Thanks - Steve

3 2

New VSA
by Miguel Barrera 23 Jun '20

23 Jun '20

Hi, I need to use some bandwidth control parameters for Huawei Cloud Campus Agile Controller (HW-Input-Committed-Information-Rate; HW-Output-Committed-Information-Rate) but I haven't been able to make it work. On my dictionary file I set them like this, and RADIUS does not start ATTRIBUTE HW-Input-Committed-Information-Rate 26.2 integer ATTRIBUTE HW-Output-Committed-Information-Rate 26.5 integer And when I use other id like this ATTRIBUTE HW-Input-Committed-Information-Rate 62 integer ATTRIBUTE HW-Output-Committed-Information-Rate 63 integer My radtest is accurate Received Access-Accept Id 153 from 3.92.114.166:1812 to 0.0.0.0:0 length 62 Session-Timeout = 1800 HW-Input-Committed-Information-Rate = 1200000 HW-Output-Committed-Information-Rate = 1200000 But the Attribute Value Pair on a .pcap are not [image: image.png] How should I handle these parameters? I know the vendor id is 2011 and the VSA are established as 26.2 and 26.5 bit I dont know how to implement them. Thank you so much. Gracias, quedo atento.

3 2

trying to get an ACK for a computone intelliserver
by The Doctor 23 Jun '20

23 Jun '20

Script started on Tue Jun 23 12:12:11 2020 You have mail. root@doctor:~ # /usr/freerad3/si[Kbin/radiusd -X -s[Kx Tue Jun 23 12:12:40 2020 : Debug: Server was built with: Tue Jun 23 12:12:40 2020 : Debug: accounting : yes Tue Jun 23 12:12:40 2020 : Debug: authentication : yes Tue Jun 23 12:12:40 2020 : Debug: ascend-binary-attributes : yes Tue Jun 23 12:12:40 2020 : Debug: coa : yes Tue Jun 23 12:12:40 2020 : Debug: control-socket : yes Tue Jun 23 12:12:40 2020 : Debug: detail : yes Tue Jun 23 12:12:40 2020 : Debug: dhcp : yes Tue Jun 23 12:12:40 2020 : Debug: dynamic-clients : yes Tue Jun 23 12:12:40 2020 : Debug: osfc2 : no Tue Jun 23 12:12:40 2020 : Debug: proxy : yes Tue Jun 23 12:12:40 2020 : Debug: regex-pcre : yes Tue Jun 23 12:12:40 2020 : Debug: regex-posix : no Tue Jun 23 12:12:40 2020 : Debug: regex-posix-extended : no Tue Jun 23 12:12:40 2020 : Debug: session-management : yes Tue Jun 23 12:12:40 2020 : Debug: stats : yes Tue Jun 23 12:12:40 2020 : Debug: systemd : no Tue Jun 23 12:12:40 2020 : Debug: tcp : yes Tue Jun 23 12:12:40 2020 : Debug: threads : yes Tue Jun 23 12:12:40 2020 : Debug: tls : yes Tue Jun 23 12:12:40 2020 : Debug: unlang : yes Tue Jun 23 12:12:40 2020 : Debug: vmps : yes Tue Jun 23 12:12:40 2020 : Debug: developer : no Tue Jun 23 12:12:40 2020 : Debug: Server core libs: Tue Jun 23 12:12:40 2020 : Debug: freeradius-server : 3.0.21 Tue Jun 23 12:12:40 2020 : Debug: talloc : 2.3.* Tue Jun 23 12:12:40 2020 : Debug: ssl : 1.1.1h dev Tue Jun 23 12:12:40 2020 : Debug: pcre : 8.44 2020-02-12 Tue Jun 23 12:12:40 2020 : Debug: Endianness: Tue Jun 23 12:12:40 2020 : Debug: little Tue Jun 23 12:12:40 2020 : Debug: Compilation flags: Tue Jun 23 12:12:40 2020 : Debug: cppflags : -isystem /usr/include/ Tue Jun 23 12:12:40 2020 : Debug: cflags : -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -Wno-date-time -g -O2 -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1 Tue Jun 23 12:12:40 2020 : Debug: ldflags : -L/usr/lib -Wl,-rpath,/usr/lib Tue Jun 23 12:12:40 2020 : Debug: libs : -lcrypto -lssl -ltalloc -latomic -lpcre -lexecinfo -ldl -lpthread -lreadline Tue Jun 23 12:12:40 2020 : Debug: Tue Jun 23 12:12:40 2020 : Info: FreeRADIUS Version 3.0.21 Tue Jun 23 12:12:40 2020 : Info: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Tue Jun 23 12:12:40 2020 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Tue Jun 23 12:12:40 2020 : Info: PARTICULAR PURPOSE Tue Jun 23 12:12:40 2020 : Info: You may redistribute copies of FreeRADIUS under the terms of the Tue Jun 23 12:12:40 2020 : Info: GNU General Public License Tue Jun 23 12:12:40 2020 : Info: For more information about these matters, see the file named COPYRIGHT Tue Jun 23 12:12:40 2020 : Info: Starting - reading configuration files ... Tue Jun 23 12:12:40 2020 : Debug: including dictionary file /usr/freerad3/share/freeradius/dictionary Tue Jun 23 12:12:40 2020 : Debug: including dictionary file /usr/freerad3/share/freeradius/dictionary.dhcp Tue Jun 23 12:12:40 2020 : Debug: including dictionary file /usr/freerad3/share/freeradius/dictionary.vqp Tue Jun 23 12:12:40 2020 : Debug: including dictionary file /usr/freerad3/etc/raddb/dictionary Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/radiusd.conf Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/proxy.conf Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/clients.conf Tue Jun 23 12:12:40 2020 : Debug: including files in directory /usr/freerad3/etc/raddb/mods-enabled/ Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/cache_eap Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/chap Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/date Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/detail Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/detail.log Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/digest Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/dynamic_clients Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/eap Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/echo Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/exec Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/expiration Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/expr Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/files Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/linelog Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/logintime Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/mschap Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/ntlm_auth Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/pap Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/passwd Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/preprocess Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/radutmp Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/replicate Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/soh Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/sradutmp Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/unix Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/unpack Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/mods-enabled/utf8 Tue Jun 23 12:12:40 2020 : Debug: including files in directory /usr/freerad3/etc/raddb/policy.d/ Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/abfab-tr Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/accounting Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/canonicalization Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/control Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/cui Tue Jun 23 12:12:40 2020 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Tue Jun 23 12:12:40 2020 : Debug: OPTIMIZING (no == yes) --> FALSE Tue Jun 23 12:12:40 2020 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Tue Jun 23 12:12:40 2020 : Debug: OPTIMIZING (no == yes) --> FALSE Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/debug Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/dhcp Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/eap Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/filter Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/moonshot-targeted-ids Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/operator-name Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/policy.d/rfc7542 Tue Jun 23 12:12:40 2020 : Debug: including files in directory /usr/freerad3/etc/raddb/sites-enabled/ Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/sites-enabled/default Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/sites-enabled/inner-tunnel Tue Jun 23 12:12:40 2020 : Debug: including configuration file /usr/freerad3/etc/raddb/sites-enabled/status Tue Jun 23 12:12:40 2020 : Debug: main { Tue Jun 23 12:12:40 2020 : Debug: security { Tue Jun 23 12:12:40 2020 : Debug: allow_core_dumps = no Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[527]: The item 'max_attributes' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[545]: The item 'reject_delay' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[565]: The item 'status_server' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[575]: The item 'allow_vulnerable_openssl' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: name = "radiusd" Tue Jun 23 12:12:40 2020 : Debug: prefix = "/usr/freerad3" Tue Jun 23 12:12:40 2020 : Debug: localstatedir = "/var" Tue Jun 23 12:12:40 2020 : Debug: logdir = "/var/log/radius" Tue Jun 23 12:12:40 2020 : Debug: run_dir = "/var/run/radiusd" Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[97]: The item 'confdir' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[104]: The item 'db_dir' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[138]: The item 'libdir' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[149]: The item 'pidfile' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[170]: The item 'correct_escapes' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[224]: The item 'max_request_time' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[243]: The item 'cleanup_delay' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[280]: The item 'hostname_lookups' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[383]: The item 'checkrad' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[594]: The item 'proxy_requests' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: main { Tue Jun 23 12:12:40 2020 : Debug: name = "radiusd" Tue Jun 23 12:12:40 2020 : Debug: prefix = "/usr/freerad3" Tue Jun 23 12:12:40 2020 : Debug: localstatedir = "/var" Tue Jun 23 12:12:40 2020 : Debug: sbindir = "/usr/freerad3/sbin" Tue Jun 23 12:12:40 2020 : Debug: logdir = "/var/log/radius" Tue Jun 23 12:12:40 2020 : Debug: run_dir = "/var/run/radiusd" Tue Jun 23 12:12:40 2020 : Debug: libdir = "/usr/freerad3/lib" Tue Jun 23 12:12:40 2020 : Debug: radacctdir = "/var/log/radius/radacct" Tue Jun 23 12:12:40 2020 : Debug: hostname_lookups = no Tue Jun 23 12:12:40 2020 : Debug: max_request_time = 30 Tue Jun 23 12:12:40 2020 : Debug: cleanup_delay = 5 Tue Jun 23 12:12:40 2020 : Debug: max_requests = 16384 Tue Jun 23 12:12:40 2020 : Debug: pidfile = "/var/run/radiusd/radiusd.pid" Tue Jun 23 12:12:40 2020 : Debug: checkrad = "/usr/freerad3/sbin/checkrad" Tue Jun 23 12:12:40 2020 : Debug: debug_level = 0 Tue Jun 23 12:12:40 2020 : Debug: proxy_requests = yes Tue Jun 23 12:12:40 2020 : Debug: log { Tue Jun 23 12:12:40 2020 : Debug: stripped_names = no Tue Jun 23 12:12:40 2020 : Debug: auth = no Tue Jun 23 12:12:40 2020 : Debug: auth_badpass = no Tue Jun 23 12:12:40 2020 : Debug: auth_goodpass = no Tue Jun 23 12:12:40 2020 : Debug: colourise = yes Tue Jun 23 12:12:40 2020 : Debug: msg_denied = "You are already logged in - access denied" Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[298]: The item 'destination' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[315]: The item 'file' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[323]: The item 'syslog_facility' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: resources { Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: security { Tue Jun 23 12:12:40 2020 : Debug: max_attributes = 200 Tue Jun 23 12:12:40 2020 : Debug: reject_delay = 1.000000 Tue Jun 23 12:12:40 2020 : Debug: status_server = yes Tue Jun 23 12:12:40 2020 : Debug: allow_vulnerable_openssl = "no" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[97]: The item 'confdir' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[104]: The item 'db_dir' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/radiusd.conf[170]: The item 'correct_escapes' is defined, but is unused by the configuration Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: radiusd: #### Loading Realms and Home Servers #### Tue Jun 23 12:12:40 2020 : Debug: proxy server { Tue Jun 23 12:12:40 2020 : Debug: retry_delay = 5 Tue Jun 23 12:12:40 2020 : Debug: retry_count = 3 Tue Jun 23 12:12:40 2020 : Debug: default_fallback = no Tue Jun 23 12:12:40 2020 : Debug: dead_time = 120 Tue Jun 23 12:12:40 2020 : Debug: wake_all_if_all_dead = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: home_server localhost { Tue Jun 23 12:12:40 2020 : Debug: ipaddr = 192.168.81.1 Tue Jun 23 12:12:40 2020 : Debug: port = 1645 Tue Jun 23 12:12:40 2020 : Debug: type = "auth+acct" Tue Jun 23 12:12:40 2020 : Debug: secret = "Tone" Tue Jun 23 12:12:40 2020 : Debug: response_window = 20.000000 Tue Jun 23 12:12:40 2020 : Debug: response_timeouts = 1 Tue Jun 23 12:12:40 2020 : Debug: max_outstanding = 65536 Tue Jun 23 12:12:40 2020 : Debug: zombie_period = 40 Tue Jun 23 12:12:40 2020 : Debug: status_check = "status-server" Tue Jun 23 12:12:40 2020 : Debug: ping_interval = 30 Tue Jun 23 12:12:40 2020 : Debug: check_interval = 30 Tue Jun 23 12:12:40 2020 : Debug: check_timeout = 4 Tue Jun 23 12:12:40 2020 : Debug: num_answers_to_alive = 3 Tue Jun 23 12:12:40 2020 : Debug: revive_interval = 120 Tue Jun 23 12:12:40 2020 : Debug: limit { Tue Jun 23 12:12:40 2020 : Debug: max_connections = 16 Tue Jun 23 12:12:40 2020 : Debug: max_requests = 0 Tue Jun 23 12:12:40 2020 : Debug: lifetime = 0 Tue Jun 23 12:12:40 2020 : Debug: idle_timeout = 0 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: coa { Tue Jun 23 12:12:40 2020 : Debug: irt = 2 Tue Jun 23 12:12:40 2020 : Debug: mrt = 16 Tue Jun 23 12:12:40 2020 : Debug: mrc = 5 Tue Jun 23 12:12:40 2020 : Debug: mrd = 30 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: home_server_pool my_auth_failover { Tue Jun 23 12:12:40 2020 : Debug: type = fail-over Tue Jun 23 12:12:40 2020 : Debug: home_server = localhost Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: realm example.com { Tue Jun 23 12:12:40 2020 : Debug: auth_pool = my_auth_failover Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: realm LOCAL { Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: realm NULL { Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: radiusd: #### Loading Clients #### Tue Jun 23 12:12:40 2020 : Debug: client localhost { Tue Jun 23 12:12:40 2020 : Debug: ipaddr = 127.0.0.1 Tue Jun 23 12:12:40 2020 : Debug: require_message_authenticator = no Tue Jun 23 12:12:40 2020 : Debug: secret = "Tone" Tue Jun 23 12:12:40 2020 : Debug: nas_type = "other" Tue Jun 23 12:12:40 2020 : Debug: proto = "*" Tue Jun 23 12:12:40 2020 : Debug: limit { Tue Jun 23 12:12:40 2020 : Debug: max_connections = 16 Tue Jun 23 12:12:40 2020 : Debug: lifetime = 0 Tue Jun 23 12:12:40 2020 : Debug: idle_timeout = 30 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Adding client 127.0.0.1/32 (127.0.0.1) to prefix tree 32 Tue Jun 23 12:12:40 2020 : Debug: client localhost_ipv6 { Tue Jun 23 12:12:40 2020 : Debug: ipv6addr = ::1 Tue Jun 23 12:12:40 2020 : Debug: require_message_authenticator = no Tue Jun 23 12:12:40 2020 : Debug: secret = "testing123" Tue Jun 23 12:12:40 2020 : Debug: limit { Tue Jun 23 12:12:40 2020 : Debug: max_connections = 16 Tue Jun 23 12:12:40 2020 : Debug: lifetime = 0 Tue Jun 23 12:12:40 2020 : Debug: idle_timeout = 30 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Adding client ::1/128 (::1) to prefix tree 128 Tue Jun 23 12:12:40 2020 : Debug: client panopticon.nl2k.ab.ca { Tue Jun 23 12:12:40 2020 : Debug: ipaddr = 192.168.81.4 Tue Jun 23 12:12:40 2020 : Debug: require_message_authenticator = no Tue Jun 23 12:12:40 2020 : Debug: secret = "Tone" Tue Jun 23 12:12:40 2020 : Debug: nas_type = "other" Tue Jun 23 12:12:40 2020 : Debug: limit { Tue Jun 23 12:12:40 2020 : Debug: max_connections = 16 Tue Jun 23 12:12:40 2020 : Debug: lifetime = 0 Tue Jun 23 12:12:40 2020 : Debug: idle_timeout = 30 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Adding client 192.168.81.4/32 (192.168.81.4) to prefix tree 32 [1mTue Jun 23 12:12:40 2020 : Info: Debugger not attached[0m Tue Jun 23 12:12:40 2020 : Debug: # Creating Auth-Type = mschap Tue Jun 23 12:12:40 2020 : Debug: # Creating Auth-Type = digest Tue Jun 23 12:12:40 2020 : Debug: # Creating Auth-Type = eap Tue Jun 23 12:12:40 2020 : Debug: # Creating Auth-Type = PAP Tue Jun 23 12:12:40 2020 : Debug: # Creating Auth-Type = CHAP Tue Jun 23 12:12:40 2020 : Debug: # Creating Auth-Type = MS-CHAP Tue Jun 23 12:12:40 2020 : Debug: # Creating Autz-Type = Status-Server Tue Jun 23 12:12:40 2020 : Debug: radiusd: #### Instantiating modules #### Tue Jun 23 12:12:40 2020 : Debug: modules { Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_always, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_always Tue Jun 23 12:12:40 2020 : Debug: # Loading module "reject" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: always reject { Tue Jun 23 12:12:40 2020 : Debug: rcode = "reject" Tue Jun 23 12:12:40 2020 : Debug: simulcount = 0 Tue Jun 23 12:12:40 2020 : Debug: mpp = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "fail" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: always fail { Tue Jun 23 12:12:40 2020 : Debug: rcode = "fail" Tue Jun 23 12:12:40 2020 : Debug: simulcount = 0 Tue Jun 23 12:12:40 2020 : Debug: mpp = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "ok" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: always ok { Tue Jun 23 12:12:40 2020 : Debug: rcode = "ok" Tue Jun 23 12:12:40 2020 : Debug: simulcount = 0 Tue Jun 23 12:12:40 2020 : Debug: mpp = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "handled" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: always handled { Tue Jun 23 12:12:40 2020 : Debug: rcode = "handled" Tue Jun 23 12:12:40 2020 : Debug: simulcount = 0 Tue Jun 23 12:12:40 2020 : Debug: mpp = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "invalid" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: always invalid { Tue Jun 23 12:12:40 2020 : Debug: rcode = "invalid" Tue Jun 23 12:12:40 2020 : Debug: simulcount = 0 Tue Jun 23 12:12:40 2020 : Debug: mpp = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "userlock" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: always userlock { Tue Jun 23 12:12:40 2020 : Debug: rcode = "userlock" Tue Jun 23 12:12:40 2020 : Debug: simulcount = 0 Tue Jun 23 12:12:40 2020 : Debug: mpp = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "notfound" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: always notfound { Tue Jun 23 12:12:40 2020 : Debug: rcode = "notfound" Tue Jun 23 12:12:40 2020 : Debug: simulcount = 0 Tue Jun 23 12:12:40 2020 : Debug: mpp = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "noop" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: always noop { Tue Jun 23 12:12:40 2020 : Debug: rcode = "noop" Tue Jun 23 12:12:40 2020 : Debug: simulcount = 0 Tue Jun 23 12:12:40 2020 : Debug: mpp = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "updated" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: always updated { Tue Jun 23 12:12:40 2020 : Debug: rcode = "updated" Tue Jun 23 12:12:40 2020 : Debug: simulcount = 0 Tue Jun 23 12:12:40 2020 : Debug: mpp = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_attr_filter, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_attr_filter Tue Jun 23 12:12:40 2020 : Debug: # Loading module "attr_filter.post-proxy" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: attr_filter attr_filter.post-proxy { Tue Jun 23 12:12:40 2020 : Debug: filename = "/usr/freerad3/etc/raddb/mods-config/attr_filter/post-proxy" Tue Jun 23 12:12:40 2020 : Debug: key = "%{Realm}" Tue Jun 23 12:12:40 2020 : Debug: relaxed = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "attr_filter.pre-proxy" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: attr_filter attr_filter.pre-proxy { Tue Jun 23 12:12:40 2020 : Debug: filename = "/usr/freerad3/etc/raddb/mods-config/attr_filter/pre-proxy" Tue Jun 23 12:12:40 2020 : Debug: key = "%{Realm}" Tue Jun 23 12:12:40 2020 : Debug: relaxed = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "attr_filter.access_reject" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: attr_filter attr_filter.access_reject { Tue Jun 23 12:12:40 2020 : Debug: filename = "/usr/freerad3/etc/raddb/mods-config/attr_filter/access_reject" Tue Jun 23 12:12:40 2020 : Debug: key = "%{User-Name}" Tue Jun 23 12:12:40 2020 : Debug: relaxed = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "attr_filter.access_challenge" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: attr_filter attr_filter.access_challenge { Tue Jun 23 12:12:40 2020 : Debug: filename = "/usr/freerad3/etc/raddb/mods-config/attr_filter/access_challenge" Tue Jun 23 12:12:40 2020 : Debug: key = "%{User-Name}" Tue Jun 23 12:12:40 2020 : Debug: relaxed = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "attr_filter.accounting_response" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: attr_filter attr_filter.accounting_response { Tue Jun 23 12:12:40 2020 : Debug: filename = "/usr/freerad3/etc/raddb/mods-config/attr_filter/accounting_response" Tue Jun 23 12:12:40 2020 : Debug: key = "%{User-Name}" Tue Jun 23 12:12:40 2020 : Debug: relaxed = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_cache, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_cache Tue Jun 23 12:12:40 2020 : Debug: # Loading module "cache_eap" from file /usr/freerad3/etc/raddb/mods-enabled/cache_eap Tue Jun 23 12:12:40 2020 : Debug: cache cache_eap { Tue Jun 23 12:12:40 2020 : Debug: driver = "rlm_cache_rbtree" Tue Jun 23 12:12:40 2020 : Debug: key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" Tue Jun 23 12:12:40 2020 : Debug: ttl = 15 Tue Jun 23 12:12:40 2020 : Debug: max_entries = 0 Tue Jun 23 12:12:40 2020 : Debug: epoch = 0 Tue Jun 23 12:12:40 2020 : Debug: add_stats = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_chap, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_chap Tue Jun 23 12:12:40 2020 : Debug: # Loading module "chap" from file /usr/freerad3/etc/raddb/mods-enabled/chap Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_date, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_date Tue Jun 23 12:12:40 2020 : Debug: # Loading module "date" from file /usr/freerad3/etc/raddb/mods-enabled/date Tue Jun 23 12:12:40 2020 : Debug: date { Tue Jun 23 12:12:40 2020 : Debug: format = "%b %e %Y %H:%M:%S %Z" Tue Jun 23 12:12:40 2020 : Debug: utc = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "wispr2date" from file /usr/freerad3/etc/raddb/mods-enabled/date Tue Jun 23 12:12:40 2020 : Debug: date wispr2date { Tue Jun 23 12:12:40 2020 : Debug: format = "%Y-%m-%dT%H:%M:%S" Tue Jun 23 12:12:40 2020 : Debug: utc = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_detail, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_detail Tue Jun 23 12:12:40 2020 : Debug: # Loading module "detail" from file /usr/freerad3/etc/raddb/mods-enabled/detail Tue Jun 23 12:12:40 2020 : Debug: detail { Tue Jun 23 12:12:40 2020 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" Tue Jun 23 12:12:40 2020 : Debug: header = "%t" Tue Jun 23 12:12:40 2020 : Debug: permissions = 384 Tue Jun 23 12:12:40 2020 : Debug: locking = no Tue Jun 23 12:12:40 2020 : Debug: escape_filenames = no Tue Jun 23 12:12:40 2020 : Debug: log_packet_header = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "auth_log" from file /usr/freerad3/etc/raddb/mods-enabled/detail.log Tue Jun 23 12:12:40 2020 : Debug: detail auth_log { Tue Jun 23 12:12:40 2020 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" Tue Jun 23 12:12:40 2020 : Debug: header = "%t" Tue Jun 23 12:12:40 2020 : Debug: permissions = 384 Tue Jun 23 12:12:40 2020 : Debug: locking = no Tue Jun 23 12:12:40 2020 : Debug: escape_filenames = no Tue Jun 23 12:12:40 2020 : Debug: log_packet_header = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "reply_log" from file /usr/freerad3/etc/raddb/mods-enabled/detail.log Tue Jun 23 12:12:40 2020 : Debug: detail reply_log { Tue Jun 23 12:12:40 2020 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" Tue Jun 23 12:12:40 2020 : Debug: header = "%t" Tue Jun 23 12:12:40 2020 : Debug: permissions = 384 Tue Jun 23 12:12:40 2020 : Debug: locking = no Tue Jun 23 12:12:40 2020 : Debug: escape_filenames = no Tue Jun 23 12:12:40 2020 : Debug: log_packet_header = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "pre_proxy_log" from file /usr/freerad3/etc/raddb/mods-enabled/detail.log Tue Jun 23 12:12:40 2020 : Debug: detail pre_proxy_log { Tue Jun 23 12:12:40 2020 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" Tue Jun 23 12:12:40 2020 : Debug: header = "%t" Tue Jun 23 12:12:40 2020 : Debug: permissions = 384 Tue Jun 23 12:12:40 2020 : Debug: locking = no Tue Jun 23 12:12:40 2020 : Debug: escape_filenames = no Tue Jun 23 12:12:40 2020 : Debug: log_packet_header = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "post_proxy_log" from file /usr/freerad3/etc/raddb/mods-enabled/detail.log Tue Jun 23 12:12:40 2020 : Debug: detail post_proxy_log { Tue Jun 23 12:12:40 2020 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" Tue Jun 23 12:12:40 2020 : Debug: header = "%t" Tue Jun 23 12:12:40 2020 : Debug: permissions = 384 Tue Jun 23 12:12:40 2020 : Debug: locking = no Tue Jun 23 12:12:40 2020 : Debug: escape_filenames = no Tue Jun 23 12:12:40 2020 : Debug: log_packet_header = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_digest, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_digest Tue Jun 23 12:12:40 2020 : Debug: # Loading module "digest" from file /usr/freerad3/etc/raddb/mods-enabled/digest Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_dynamic_clients, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_dynamic_clients Tue Jun 23 12:12:40 2020 : Debug: # Loading module "dynamic_clients" from file /usr/freerad3/etc/raddb/mods-enabled/dynamic_clients Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_eap, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_eap Tue Jun 23 12:12:40 2020 : Debug: # Loading module "eap" from file /usr/freerad3/etc/raddb/mods-enabled/eap Tue Jun 23 12:12:40 2020 : Debug: eap { Tue Jun 23 12:12:40 2020 : Debug: default_eap_type = "md5" Tue Jun 23 12:12:40 2020 : Debug: timer_expire = 60 Tue Jun 23 12:12:40 2020 : Debug: ignore_unknown_eap_types = no Tue Jun 23 12:12:40 2020 : Debug: cisco_accounting_username_bug = no Tue Jun 23 12:12:40 2020 : Debug: max_sessions = 16384 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_exec, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_exec Tue Jun 23 12:12:40 2020 : Debug: # Loading module "echo" from file /usr/freerad3/etc/raddb/mods-enabled/echo Tue Jun 23 12:12:40 2020 : Debug: exec echo { Tue Jun 23 12:12:40 2020 : Debug: wait = yes Tue Jun 23 12:12:40 2020 : Debug: program = "/bin/echo %{User-Name}" Tue Jun 23 12:12:40 2020 : Debug: input_pairs = "request" Tue Jun 23 12:12:40 2020 : Debug: output_pairs = "reply" Tue Jun 23 12:12:40 2020 : Debug: shell_escape = yes Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "exec" from file /usr/freerad3/etc/raddb/mods-enabled/exec Tue Jun 23 12:12:40 2020 : Debug: exec { Tue Jun 23 12:12:40 2020 : Debug: wait = no Tue Jun 23 12:12:40 2020 : Debug: input_pairs = "request" Tue Jun 23 12:12:40 2020 : Debug: shell_escape = yes Tue Jun 23 12:12:40 2020 : Debug: timeout = 10 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_expiration, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_expiration Tue Jun 23 12:12:40 2020 : Debug: # Loading module "expiration" from file /usr/freerad3/etc/raddb/mods-enabled/expiration Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_expr, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_expr Tue Jun 23 12:12:40 2020 : Debug: # Loading module "expr" from file /usr/freerad3/etc/raddb/mods-enabled/expr Tue Jun 23 12:12:40 2020 : Debug: expr { Tue Jun 23 12:12:40 2020 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_files, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_files Tue Jun 23 12:12:40 2020 : Debug: # Loading module "files" from file /usr/freerad3/etc/raddb/mods-enabled/files Tue Jun 23 12:12:40 2020 : Debug: files { Tue Jun 23 12:12:40 2020 : Debug: filename = "/usr/freerad3/etc/raddb/mods-config/files/authorize" Tue Jun 23 12:12:40 2020 : Debug: acctusersfile = "/usr/freerad3/etc/raddb/mods-config/files/accounting" Tue Jun 23 12:12:40 2020 : Debug: preproxy_usersfile = "/usr/freerad3/etc/raddb/mods-config/files/pre-proxy" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_linelog, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_linelog Tue Jun 23 12:12:40 2020 : Debug: # Loading module "linelog" from file /usr/freerad3/etc/raddb/mods-enabled/linelog Tue Jun 23 12:12:40 2020 : Debug: linelog { Tue Jun 23 12:12:40 2020 : Debug: filename = "/var/log/radius/linelog" Tue Jun 23 12:12:40 2020 : Debug: escape_filenames = no Tue Jun 23 12:12:40 2020 : Debug: syslog_severity = "info" Tue Jun 23 12:12:40 2020 : Debug: permissions = 384 Tue Jun 23 12:12:40 2020 : Debug: format = "This is a log message for %{User-Name}" Tue Jun 23 12:12:40 2020 : Debug: reference = "messages.%{%{reply:Packet-Type}:-default}" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "log_accounting" from file /usr/freerad3/etc/raddb/mods-enabled/linelog Tue Jun 23 12:12:40 2020 : Debug: linelog log_accounting { Tue Jun 23 12:12:40 2020 : Debug: filename = "/var/log/radius/linelog-accounting" Tue Jun 23 12:12:40 2020 : Debug: escape_filenames = no Tue Jun 23 12:12:40 2020 : Debug: syslog_severity = "info" Tue Jun 23 12:12:40 2020 : Debug: permissions = 384 Tue Jun 23 12:12:40 2020 : Debug: format = "" Tue Jun 23 12:12:40 2020 : Debug: reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_logintime, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_logintime Tue Jun 23 12:12:40 2020 : Debug: # Loading module "logintime" from file /usr/freerad3/etc/raddb/mods-enabled/logintime Tue Jun 23 12:12:40 2020 : Debug: logintime { Tue Jun 23 12:12:40 2020 : Debug: minimum_timeout = 60 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_mschap, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_mschap Tue Jun 23 12:12:40 2020 : Debug: # Loading module "mschap" from file /usr/freerad3/etc/raddb/mods-enabled/mschap Tue Jun 23 12:12:40 2020 : Debug: mschap { Tue Jun 23 12:12:40 2020 : Debug: use_mppe = yes Tue Jun 23 12:12:40 2020 : Debug: require_encryption = no Tue Jun 23 12:12:40 2020 : Debug: require_strong = no Tue Jun 23 12:12:40 2020 : Debug: with_ntdomain_hack = yes Tue Jun 23 12:12:40 2020 : Debug: passchange { Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: allow_retry = yes Tue Jun 23 12:12:40 2020 : Debug: winbind_retry_with_normalised_username = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "ntlm_auth" from file /usr/freerad3/etc/raddb/mods-enabled/ntlm_auth Tue Jun 23 12:12:40 2020 : Debug: exec ntlm_auth { Tue Jun 23 12:12:40 2020 : Debug: wait = yes Tue Jun 23 12:12:40 2020 : Debug: program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" Tue Jun 23 12:12:40 2020 : Debug: shell_escape = yes Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_pap, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_pap Tue Jun 23 12:12:40 2020 : Debug: # Loading module "pap" from file /usr/freerad3/etc/raddb/mods-enabled/pap Tue Jun 23 12:12:40 2020 : Debug: pap { Tue Jun 23 12:12:40 2020 : Debug: normalise = yes Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_passwd, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_passwd Tue Jun 23 12:12:40 2020 : Debug: # Loading module "etc_passwd" from file /usr/freerad3/etc/raddb/mods-enabled/passwd Tue Jun 23 12:12:40 2020 : Debug: passwd etc_passwd { Tue Jun 23 12:12:40 2020 : Debug: filename = "/etc/master.passwd" Tue Jun 23 12:12:40 2020 : Debug: format = "*User-Name:Crypt-Password:" Tue Jun 23 12:12:40 2020 : Debug: delimiter = ":" Tue Jun 23 12:12:40 2020 : Debug: ignore_nislike = no Tue Jun 23 12:12:40 2020 : Debug: ignore_empty = yes Tue Jun 23 12:12:40 2020 : Debug: allow_multiple_keys = no Tue Jun 23 12:12:40 2020 : Debug: hash_size = 100 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_preprocess, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_preprocess Tue Jun 23 12:12:40 2020 : Debug: # Loading module "preprocess" from file /usr/freerad3/etc/raddb/mods-enabled/preprocess Tue Jun 23 12:12:40 2020 : Debug: preprocess { Tue Jun 23 12:12:40 2020 : Debug: huntgroups = "/usr/freerad3/etc/raddb/mods-config/preprocess/huntgroups" Tue Jun 23 12:12:40 2020 : Debug: hints = "/usr/freerad3/etc/raddb/mods-config/preprocess/hints" Tue Jun 23 12:12:40 2020 : Debug: with_ascend_hack = no Tue Jun 23 12:12:40 2020 : Debug: ascend_channels_per_line = 23 Tue Jun 23 12:12:40 2020 : Debug: with_ntdomain_hack = no Tue Jun 23 12:12:40 2020 : Debug: with_specialix_jetstream_hack = no Tue Jun 23 12:12:40 2020 : Debug: with_cisco_vsa_hack = no Tue Jun 23 12:12:40 2020 : Debug: with_alvarion_vsa_hack = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_radutmp, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_radutmp Tue Jun 23 12:12:40 2020 : Debug: # Loading module "radutmp" from file /usr/freerad3/etc/raddb/mods-enabled/radutmp Tue Jun 23 12:12:40 2020 : Debug: radutmp { Tue Jun 23 12:12:40 2020 : Debug: filename = "/var/log/radius/radutmp" Tue Jun 23 12:12:40 2020 : Debug: username = "%{User-Name}" Tue Jun 23 12:12:40 2020 : Debug: case_sensitive = yes Tue Jun 23 12:12:40 2020 : Debug: check_with_nas = yes Tue Jun 23 12:12:40 2020 : Debug: permissions = 384 Tue Jun 23 12:12:40 2020 : Debug: caller_id = yes Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_realm, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_realm Tue Jun 23 12:12:40 2020 : Debug: # Loading module "IPASS" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: realm IPASS { Tue Jun 23 12:12:40 2020 : Debug: format = "prefix" Tue Jun 23 12:12:40 2020 : Debug: delimiter = "/" Tue Jun 23 12:12:40 2020 : Debug: ignore_default = no Tue Jun 23 12:12:40 2020 : Debug: ignore_null = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "suffix" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: realm suffix { Tue Jun 23 12:12:40 2020 : Debug: format = "suffix" Tue Jun 23 12:12:40 2020 : Debug: delimiter = "@" Tue Jun 23 12:12:40 2020 : Debug: ignore_default = no Tue Jun 23 12:12:40 2020 : Debug: ignore_null = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "bangpath" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: realm bangpath { Tue Jun 23 12:12:40 2020 : Debug: format = "prefix" Tue Jun 23 12:12:40 2020 : Debug: delimiter = "!" Tue Jun 23 12:12:40 2020 : Debug: ignore_default = no Tue Jun 23 12:12:40 2020 : Debug: ignore_null = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "realmpercent" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: realm realmpercent { Tue Jun 23 12:12:40 2020 : Debug: format = "suffix" Tue Jun 23 12:12:40 2020 : Debug: delimiter = "%" Tue Jun 23 12:12:40 2020 : Debug: ignore_default = no Tue Jun 23 12:12:40 2020 : Debug: ignore_null = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "ntdomain" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: realm ntdomain { Tue Jun 23 12:12:40 2020 : Debug: format = "prefix" Tue Jun 23 12:12:40 2020 : Debug: delimiter = "\\" Tue Jun 23 12:12:40 2020 : Debug: ignore_default = no Tue Jun 23 12:12:40 2020 : Debug: ignore_null = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_replicate, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_replicate Tue Jun 23 12:12:40 2020 : Debug: # Loading module "replicate" from file /usr/freerad3/etc/raddb/mods-enabled/replicate Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_soh, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_soh Tue Jun 23 12:12:40 2020 : Debug: # Loading module "soh" from file /usr/freerad3/etc/raddb/mods-enabled/soh Tue Jun 23 12:12:40 2020 : Debug: soh { Tue Jun 23 12:12:40 2020 : Debug: dhcp = yes Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Loading module "sradutmp" from file /usr/freerad3/etc/raddb/mods-enabled/sradutmp Tue Jun 23 12:12:40 2020 : Debug: radutmp sradutmp { Tue Jun 23 12:12:40 2020 : Debug: filename = "/var/log/radius/sradutmp" Tue Jun 23 12:12:40 2020 : Debug: username = "%{User-Name}" Tue Jun 23 12:12:40 2020 : Debug: case_sensitive = yes Tue Jun 23 12:12:40 2020 : Debug: check_with_nas = yes Tue Jun 23 12:12:40 2020 : Debug: permissions = 420 Tue Jun 23 12:12:40 2020 : Debug: caller_id = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_unix, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_unix Tue Jun 23 12:12:40 2020 : Debug: # Loading module "unix" from file /usr/freerad3/etc/raddb/mods-enabled/unix Tue Jun 23 12:12:40 2020 : Debug: unix { Tue Jun 23 12:12:40 2020 : Debug: radwtmp = "/var/log/radius/radwtmp" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Creating attribute Unix-Group Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_unpack, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_unpack Tue Jun 23 12:12:40 2020 : Debug: # Loading module "unpack" from file /usr/freerad3/etc/raddb/mods-enabled/unpack Tue Jun 23 12:12:40 2020 : Debug: Loaded rlm_utf8, checking if it's valid Tue Jun 23 12:12:40 2020 : Debug: # Loaded module rlm_utf8 Tue Jun 23 12:12:40 2020 : Debug: # Loading module "utf8" from file /usr/freerad3/etc/raddb/mods-enabled/utf8 Tue Jun 23 12:12:40 2020 : Debug: instantiate { Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "reject" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "fail" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "ok" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "handled" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "invalid" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "userlock" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "notfound" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "noop" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "updated" from file /usr/freerad3/etc/raddb/mods-enabled/always Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "attr_filter.post-proxy" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/attr_filter/post-proxy Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "attr_filter.pre-proxy" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/attr_filter/pre-proxy Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "attr_filter.access_reject" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/attr_filter/access_reject Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "attr_filter.access_challenge" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/attr_filter/access_challenge Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "attr_filter.accounting_response" from file /usr/freerad3/etc/raddb/mods-enabled/attr_filter Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/attr_filter/accounting_response Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "cache_eap" from file /usr/freerad3/etc/raddb/mods-enabled/cache_eap Tue Jun 23 12:12:40 2020 : Debug: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "detail" from file /usr/freerad3/etc/raddb/mods-enabled/detail Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "auth_log" from file /usr/freerad3/etc/raddb/mods-enabled/detail.log Tue Jun 23 12:12:40 2020 : Debug: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "reply_log" from file /usr/freerad3/etc/raddb/mods-enabled/detail.log Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "pre_proxy_log" from file /usr/freerad3/etc/raddb/mods-enabled/detail.log Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "post_proxy_log" from file /usr/freerad3/etc/raddb/mods-enabled/detail.log Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "eap" from file /usr/freerad3/etc/raddb/mods-enabled/eap Tue Jun 23 12:12:40 2020 : Debug: # Linked to sub-module rlm_eap_md5 Tue Jun 23 12:12:40 2020 : Debug: # Linked to sub-module rlm_eap_leap Tue Jun 23 12:12:40 2020 : Debug: # Linked to sub-module rlm_eap_gtc Tue Jun 23 12:12:40 2020 : Debug: gtc { Tue Jun 23 12:12:40 2020 : Debug: challenge = "Password: " Tue Jun 23 12:12:40 2020 : Debug: auth_type = "PAP" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Linked to sub-module rlm_eap_tls Tue Jun 23 12:12:40 2020 : Debug: tls { Tue Jun 23 12:12:40 2020 : Debug: tls = "tls-common" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: tls-config tls-common { Tue Jun 23 12:12:40 2020 : Debug: verify_depth = 0 Tue Jun 23 12:12:40 2020 : Debug: ca_path = "/usr/freerad3/etc/raddb/certs" Tue Jun 23 12:12:40 2020 : Debug: pem_file_type = yes Tue Jun 23 12:12:40 2020 : Debug: private_key_file = "/usr/freerad3/etc/raddb/certs/server.pem" Tue Jun 23 12:12:40 2020 : Debug: certificate_file = "/usr/freerad3/etc/raddb/certs/server.pem" Tue Jun 23 12:12:40 2020 : Debug: ca_file = "/usr/freerad3/etc/raddb/certs/ca.pem" Tue Jun 23 12:12:40 2020 : Debug: private_key_password = "whatever" Tue Jun 23 12:12:40 2020 : Debug: dh_file = "/usr/freerad3/etc/raddb/certs/dh" Tue Jun 23 12:12:40 2020 : Debug: fragment_size = 1024 Tue Jun 23 12:12:40 2020 : Debug: include_length = yes Tue Jun 23 12:12:40 2020 : Debug: auto_chain = yes Tue Jun 23 12:12:40 2020 : Debug: check_crl = no Tue Jun 23 12:12:40 2020 : Debug: check_all_crl = no Tue Jun 23 12:12:40 2020 : Debug: cipher_list = "DEFAULT" Tue Jun 23 12:12:40 2020 : Debug: cipher_server_preference = no Tue Jun 23 12:12:40 2020 : Debug: ecdh_curve = "prime256v1" Tue Jun 23 12:12:40 2020 : Debug: disable_tlsv1 = yes Tue Jun 23 12:12:40 2020 : Debug: disable_tlsv1_1 = yes Tue Jun 23 12:12:40 2020 : Debug: tls_max_version = "1.2" Tue Jun 23 12:12:40 2020 : Debug: tls_min_version = "1.2" Tue Jun 23 12:12:40 2020 : Debug: cache { Tue Jun 23 12:12:40 2020 : Debug: enable = no Tue Jun 23 12:12:40 2020 : Debug: lifetime = 24 Tue Jun 23 12:12:40 2020 : Debug: max_entries = 255 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: verify { Tue Jun 23 12:12:40 2020 : Debug: skip_if_ocsp_ok = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: ocsp { Tue Jun 23 12:12:40 2020 : Debug: enable = no Tue Jun 23 12:12:40 2020 : Debug: override_cert_url = yes Tue Jun 23 12:12:40 2020 : Debug: url = "http://127.0.0.1/ocsp/" Tue Jun 23 12:12:40 2020 : Debug: use_nonce = yes Tue Jun 23 12:12:40 2020 : Debug: timeout = 0 Tue Jun 23 12:12:40 2020 : Debug: softfail = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } [1m[33mTue Jun 23 12:12:40 2020 : Warning: Please use tls_min_version and tls_max_version instead of disable_tlsv1[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2[0m Tue Jun 23 12:12:40 2020 : Debug: # Linked to sub-module rlm_eap_ttls Tue Jun 23 12:12:40 2020 : Debug: ttls { Tue Jun 23 12:12:40 2020 : Debug: tls = "tls-common" Tue Jun 23 12:12:40 2020 : Debug: default_eap_type = "md5" Tue Jun 23 12:12:40 2020 : Debug: copy_request_to_tunnel = no Tue Jun 23 12:12:40 2020 : Debug: use_tunneled_reply = no Tue Jun 23 12:12:40 2020 : Debug: virtual_server = "inner-tunnel" Tue Jun 23 12:12:40 2020 : Debug: include_length = yes Tue Jun 23 12:12:40 2020 : Debug: require_client_cert = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: tls: Using cached TLS configuration from previous invocation Tue Jun 23 12:12:40 2020 : Debug: # Linked to sub-module rlm_eap_peap Tue Jun 23 12:12:40 2020 : Debug: peap { Tue Jun 23 12:12:40 2020 : Debug: tls = "tls-common" Tue Jun 23 12:12:40 2020 : Debug: default_eap_type = "mschapv2" Tue Jun 23 12:12:40 2020 : Debug: copy_request_to_tunnel = no Tue Jun 23 12:12:40 2020 : Debug: use_tunneled_reply = no Tue Jun 23 12:12:40 2020 : Debug: proxy_tunneled_request_as_eap = yes Tue Jun 23 12:12:40 2020 : Debug: virtual_server = "inner-tunnel" Tue Jun 23 12:12:40 2020 : Debug: soh = no Tue Jun 23 12:12:40 2020 : Debug: require_client_cert = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: tls: Using cached TLS configuration from previous invocation Tue Jun 23 12:12:40 2020 : Debug: # Linked to sub-module rlm_eap_mschapv2 Tue Jun 23 12:12:40 2020 : Debug: mschapv2 { Tue Jun 23 12:12:40 2020 : Debug: with_ntdomain_hack = no Tue Jun 23 12:12:40 2020 : Debug: send_error = no Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "expiration" from file /usr/freerad3/etc/raddb/mods-enabled/expiration Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "files" from file /usr/freerad3/etc/raddb/mods-enabled/files Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/files/authorize Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/files/accounting Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/files/pre-proxy Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "linelog" from file /usr/freerad3/etc/raddb/mods-enabled/linelog Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "log_accounting" from file /usr/freerad3/etc/raddb/mods-enabled/linelog Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "logintime" from file /usr/freerad3/etc/raddb/mods-enabled/logintime Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "mschap" from file /usr/freerad3/etc/raddb/mods-enabled/mschap Tue Jun 23 12:12:40 2020 : Debug: rlm_mschap (mschap): using internal authentication Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "pap" from file /usr/freerad3/etc/raddb/mods-enabled/pap Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "etc_passwd" from file /usr/freerad3/etc/raddb/mods-enabled/passwd Tue Jun 23 12:12:40 2020 : Debug: rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "preprocess" from file /usr/freerad3/etc/raddb/mods-enabled/preprocess Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/preprocess/huntgroups Tue Jun 23 12:12:40 2020 : Debug: reading pairlist file /usr/freerad3/etc/raddb/mods-config/preprocess/hints Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "IPASS" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "suffix" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "bangpath" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "realmpercent" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: # Instantiating module "ntdomain" from file /usr/freerad3/etc/raddb/mods-enabled/realm Tue Jun 23 12:12:40 2020 : Debug: } # modules Tue Jun 23 12:12:40 2020 : Debug: radiusd: #### Loading Virtual Servers #### Tue Jun 23 12:12:40 2020 : Debug: server { # from file /usr/freerad3/etc/raddb/radiusd.conf Tue Jun 23 12:12:40 2020 : Debug: } # server Tue Jun 23 12:12:40 2020 : Debug: server default { # from file /usr/freerad3/etc/raddb/sites-enabled/default Tue Jun 23 12:12:40 2020 : Debug: # Loading authenticate {...} Tue Jun 23 12:12:40 2020 : Debug: mschap Tue Jun 23 12:12:40 2020 : Debug: digest Tue Jun 23 12:12:40 2020 : Debug: eap Tue Jun 23 12:12:40 2020 : Debug: # Loading authorize {...} Tue Jun 23 12:12:40 2020 : Debug: policy filter_username { Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name) { Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ / /) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /@[^@]*@/) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /\.\./) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /(a)(.+)\.(.+)$/) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /\.$/) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /(a)\./) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: preprocess Tue Jun 23 12:12:40 2020 : Debug: chap Tue Jun 23 12:12:40 2020 : Debug: mschap Tue Jun 23 12:12:40 2020 : Debug: digest Tue Jun 23 12:12:40 2020 : Debug: suffix Tue Jun 23 12:12:40 2020 : Debug: eap Tue Jun 23 12:12:40 2020 : Debug: unix Tue Jun 23 12:12:40 2020 : Debug: files [1m[33mTue Jun 23 12:12:40 2020 : Warning: Ignoring "sql" (see raddb/mods-available/README.rst)[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: Ignoring "ldap" (see raddb/mods-available/README.rst)[0m Tue Jun 23 12:12:40 2020 : Debug: expiration Tue Jun 23 12:12:40 2020 : Debug: logintime Tue Jun 23 12:12:40 2020 : Debug: pap Tue Jun 23 12:12:40 2020 : Debug: # Loading preacct {...} Tue Jun 23 12:12:40 2020 : Debug: preprocess Tue Jun 23 12:12:40 2020 : Debug: policy acct_unique { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Tmp-String-9 := "ai:" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if ("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/ && "%{string:&Class}" =~ /^ai:([0-9a-f]{32})/) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Acct-Unique-Session-Id := "%{md5:%{1},%{Acct-Session-ID}}" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: else { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Acct-Unique-Session-Id := "%{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: suffix Tue Jun 23 12:12:40 2020 : Debug: files Tue Jun 23 12:12:40 2020 : Debug: # Loading accounting {...} Tue Jun 23 12:12:40 2020 : Debug: detail Tue Jun 23 12:12:40 2020 : Debug: unix Tue Jun 23 12:12:40 2020 : Debug: exec Tue Jun 23 12:12:40 2020 : Debug: attr_filter.accounting_response Tue Jun 23 12:12:40 2020 : Debug: # Loading post-proxy {...} Tue Jun 23 12:12:40 2020 : Debug: post_proxy_log Tue Jun 23 12:12:40 2020 : Debug: attr_filter.post-proxy Tue Jun 23 12:12:40 2020 : Debug: eap Tue Jun 23 12:12:40 2020 : Debug: # Loading post-auth {...} [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[704]: Please change attribute reference to '&State := ...'[0m Tue Jun 23 12:12:40 2020 : Debug: if (!&reply:State) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &reply:State := "0x%{randstr:16h}" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reply_log Tue Jun 23 12:12:40 2020 : Debug: exec [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[806]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[807]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[808]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[809]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[810]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[811]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[813]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[814]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[815]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[816]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[817]: Please change attribute reference to '&Reply-Message += ...'[0m [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[818]: Please change attribute reference to '&Reply-Message += ...'[0m Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Serial}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Expiration}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Subject}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Issuer}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Common-Name}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Subject-Alt-Name-Email}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Serial}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Expiration}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Subject}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Issuer}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Common-Name}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Subject-Alt-Name-Email}" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: policy insert_acct_class { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &reply:Class = "ai:%{md5:%t,%I,%{Packet-Src-Port},%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}},%{NAS-IP-Address},%{Calling-Station-ID},%{User-Name}}" Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } [1m[33mTue Jun 23 12:12:40 2020 : Warning: /usr/freerad3/etc/raddb/sites-enabled/default[838]: Please change attribute reference to '&EAP-Key-Name := ...'[0m Tue Jun 23 12:12:40 2020 : Debug: if (&reply:EAP-Session-Id) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &reply:EAP-Key-Name := &reply:EAP-Session-Id Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } # server default Tue Jun 23 12:12:40 2020 : Debug: server inner-tunnel { # from file /usr/freerad3/etc/raddb/sites-enabled/inner-tunnel Tue Jun 23 12:12:40 2020 : Debug: # Loading authenticate {...} Tue Jun 23 12:12:40 2020 : Debug: mschap Tue Jun 23 12:12:40 2020 : Debug: eap Tue Jun 23 12:12:40 2020 : Debug: # Loading authorize {...} Tue Jun 23 12:12:40 2020 : Debug: policy filter_username { Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name) { Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ / /) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /@[^@]*@/) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /\.\./) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /(a)(.+)\.(.+)$/) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /\.$/) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: if (&User-Name =~ /(a)\./) { Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot' Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: reject Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: chap Tue Jun 23 12:12:40 2020 : Debug: mschap Tue Jun 23 12:12:40 2020 : Debug: unix Tue Jun 23 12:12:40 2020 : Debug: suffix Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &control:Proxy-To-Realm := LOCAL Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: eap Tue Jun 23 12:12:40 2020 : Debug: files Tue Jun 23 12:12:40 2020 : Debug: expiration Tue Jun 23 12:12:40 2020 : Debug: logintime Tue Jun 23 12:12:40 2020 : Debug: pap Tue Jun 23 12:12:40 2020 : Debug: # Loading session {...} Tue Jun 23 12:12:40 2020 : Debug: radutmp Tue Jun 23 12:12:40 2020 : Debug: # Loading post-proxy {...} Tue Jun 23 12:12:40 2020 : Debug: eap Tue Jun 23 12:12:40 2020 : Debug: # Loading post-auth {...} [1mTue Jun 23 12:12:40 2020 : Info: # Skipping contents of 'if' as it is always 'false' -- /usr/freerad3/etc/raddb/sites-enabled/inner-tunnel:336[0m Tue Jun 23 12:12:40 2020 : Debug: if (false) { Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } # server inner-tunnel Tue Jun 23 12:12:40 2020 : Debug: server status { # from file /usr/freerad3/etc/raddb/sites-enabled/status Tue Jun 23 12:12:40 2020 : Debug: # Loading authorize {...} Tue Jun 23 12:12:40 2020 : Debug: ok Tue Jun 23 12:12:40 2020 : Debug: } # server status Tue Jun 23 12:12:40 2020 : Debug: radiusd: #### Opening IP addresses and Ports #### Tue Jun 23 12:12:40 2020 : Debug: listen { Tue Jun 23 12:12:40 2020 : Debug: type = "auth" Tue Jun 23 12:12:40 2020 : Debug: ipaddr = * Tue Jun 23 12:12:40 2020 : Debug: port = 0 Tue Jun 23 12:12:40 2020 : Debug: limit { Tue Jun 23 12:12:40 2020 : Debug: max_connections = 16 Tue Jun 23 12:12:40 2020 : Debug: lifetime = 0 Tue Jun 23 12:12:40 2020 : Debug: idle_timeout = 30 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: listen { Tue Jun 23 12:12:40 2020 : Debug: type = "acct" Tue Jun 23 12:12:40 2020 : Debug: ipaddr = * Tue Jun 23 12:12:40 2020 : Debug: port = 0 Tue Jun 23 12:12:40 2020 : Debug: limit { Tue Jun 23 12:12:40 2020 : Debug: max_connections = 16 Tue Jun 23 12:12:40 2020 : Debug: lifetime = 0 Tue Jun 23 12:12:40 2020 : Debug: idle_timeout = 30 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: listen { Tue Jun 23 12:12:40 2020 : Debug: type = "auth" Tue Jun 23 12:12:40 2020 : Debug: ipv6addr = :: Tue Jun 23 12:12:40 2020 : Debug: port = 0 Tue Jun 23 12:12:40 2020 : Debug: limit { Tue Jun 23 12:12:40 2020 : Debug: max_connections = 16 Tue Jun 23 12:12:40 2020 : Debug: lifetime = 0 Tue Jun 23 12:12:40 2020 : Debug: idle_timeout = 30 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: listen { Tue Jun 23 12:12:40 2020 : Debug: type = "acct" Tue Jun 23 12:12:40 2020 : Debug: ipv6addr = :: Tue Jun 23 12:12:40 2020 : Debug: port = 0 Tue Jun 23 12:12:40 2020 : Debug: limit { Tue Jun 23 12:12:40 2020 : Debug: max_connections = 16 Tue Jun 23 12:12:40 2020 : Debug: lifetime = 0 Tue Jun 23 12:12:40 2020 : Debug: idle_timeout = 30 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: listen { Tue Jun 23 12:12:40 2020 : Debug: type = "auth" Tue Jun 23 12:12:40 2020 : Debug: ipaddr = 127.0.0.1 Tue Jun 23 12:12:40 2020 : Debug: port = 18120 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: listen { Tue Jun 23 12:12:40 2020 : Debug: type = "status" Tue Jun 23 12:12:40 2020 : Debug: ipaddr = 127.0.0.1 Tue Jun 23 12:12:40 2020 : Debug: port = 18121 Tue Jun 23 12:12:40 2020 : Debug: client admin { Tue Jun 23 12:12:40 2020 : Debug: ipaddr = 127.0.0.1 Tue Jun 23 12:12:40 2020 : Debug: require_message_authenticator = no Tue Jun 23 12:12:40 2020 : Debug: secret = "adminsecret" Tue Jun 23 12:12:40 2020 : Debug: limit { Tue Jun 23 12:12:40 2020 : Debug: max_connections = 16 Tue Jun 23 12:12:40 2020 : Debug: lifetime = 0 Tue Jun 23 12:12:40 2020 : Debug: idle_timeout = 30 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Adding client 127.0.0.1/32 (127.0.0.1) to prefix tree 32 Tue Jun 23 12:12:40 2020 : Debug: } Tue Jun 23 12:12:40 2020 : Debug: Listening on auth address * port 1645 bound to server default Tue Jun 23 12:12:40 2020 : Debug: Listening on acct address * port 1646 bound to server default Tue Jun 23 12:12:40 2020 : Debug: Listening on auth address :: port 1645 bound to server default Tue Jun 23 12:12:40 2020 : Debug: Listening on acct address :: port 1646 bound to server default Tue Jun 23 12:12:40 2020 : Debug: Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Tue Jun 23 12:12:40 2020 : Debug: Listening on status address 127.0.0.1 port 18121 bound to server status Tue Jun 23 12:12:40 2020 : Debug: Opened new proxy socket 'proxy address * port 26735' Tue Jun 23 12:12:40 2020 : Debug: Listening on proxy address * port 26735 Tue Jun 23 12:12:40 2020 : Debug: Opened new proxy socket 'proxy address :: port 10084' Tue Jun 23 12:12:40 2020 : Debug: Listening on proxy address :: port 10084 [1mTue Jun 23 12:12:40 2020 : Info: Ready to process requests[0m Tue Jun 23 12:13:41 2020 : Debug: (0) Received Access-Request Id 1 from 192.168.81.4:1882 to 192.168.81.1:1645 length 56 Tue Jun 23 12:13:41 2020 : Debug: (0) User-Name = "Puser" Tue Jun 23 12:13:41 2020 : Debug: (0) User-Password = "passwd" Tue Jun 23 12:13:41 2020 : Debug: (0) NAS-IP-Address = 192.168.81.4 Tue Jun 23 12:13:41 2020 : Debug: (0) NAS-Port = 20 Tue Jun 23 12:13:41 2020 : Debug: (0) session-state: No State attribute Tue Jun 23 12:13:41 2020 : Debug: (0) # Executing section authorize from file /usr/freerad3/etc/raddb/sites-enabled/default Tue Jun 23 12:13:41 2020 : Debug: (0) authorize { Tue Jun 23 12:13:41 2020 : Debug: (0) policy filter_username { Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name) { Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name) -> TRUE Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name) { Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ / /) { Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ / /) -> FALSE Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ /@[^@]*@/ ) { Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ /\.\./ ) { Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ /\.\./ ) -> FALSE Tue Jun 23 12:13:41 2020 : Debug: (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { Tue Jun 23 12:13:41 2020 : Debug: (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ /\.$/) { Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ /\.$/) -> FALSE Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ /(a)\./) { Tue Jun 23 12:13:41 2020 : Debug: (0) if (&User-Name =~ /(a)\./) -> FALSE Tue Jun 23 12:13:41 2020 : Debug: (0) } # if (&User-Name) = notfound Tue Jun 23 12:13:41 2020 : Debug: (0) } # policy filter_username = notfound Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling preprocess (rlm_preprocess) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from preprocess (rlm_preprocess) Tue Jun 23 12:13:41 2020 : Debug: (0) [preprocess] = ok Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling chap (rlm_chap) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from chap (rlm_chap) Tue Jun 23 12:13:41 2020 : Debug: (0) [chap] = noop Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling mschap (rlm_mschap) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from mschap (rlm_mschap) Tue Jun 23 12:13:41 2020 : Debug: (0) [mschap] = noop Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling digest (rlm_digest) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from digest (rlm_digest) Tue Jun 23 12:13:41 2020 : Debug: (0) [digest] = noop Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling suffix (rlm_realm) Tue Jun 23 12:13:41 2020 : Debug: (0) suffix: Checking for suffix after "@" Tue Jun 23 12:13:41 2020 : Debug: (0) suffix: No '@' in User-Name = "Puser", looking up realm NULL Tue Jun 23 12:13:41 2020 : Debug: (0) suffix: Found realm "NULL" Tue Jun 23 12:13:41 2020 : Debug: (0) suffix: Adding Stripped-User-Name = "Puser" Tue Jun 23 12:13:41 2020 : Debug: (0) suffix: Adding Realm = "NULL" Tue Jun 23 12:13:41 2020 : Debug: (0) suffix: Authentication realm is LOCAL Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from suffix (rlm_realm) Tue Jun 23 12:13:41 2020 : Debug: (0) [suffix] = ok Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling eap (rlm_eap) Tue Jun 23 12:13:41 2020 : Debug: (0) eap: No EAP-Message, not doing EAP Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from eap (rlm_eap) Tue Jun 23 12:13:41 2020 : Debug: (0) [eap] = noop Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling unix (rlm_unix) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from unix (rlm_unix) Tue Jun 23 12:13:41 2020 : Debug: (0) [unix] = updated Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling files (rlm_files) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from files (rlm_files) Tue Jun 23 12:13:41 2020 : Debug: (0) [files] = noop Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling expiration (rlm_expiration) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from expiration (rlm_expiration) Tue Jun 23 12:13:41 2020 : Debug: (0) [expiration] = noop Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling logintime (rlm_logintime) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from logintime (rlm_logintime) Tue Jun 23 12:13:41 2020 : Debug: (0) [logintime] = noop Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: calling pap (rlm_pap) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authorize]: returned from pap (rlm_pap) Tue Jun 23 12:13:41 2020 : Debug: (0) [pap] = updated Tue Jun 23 12:13:41 2020 : Debug: (0) } # authorize = updated Tue Jun 23 12:13:41 2020 : Debug: (0) Found Auth-Type = PAP Tue Jun 23 12:13:41 2020 : Debug: (0) # Executing group from file /usr/freerad3/etc/raddb/sites-enabled/default Tue Jun 23 12:13:41 2020 : Debug: (0) Auth-Type PAP { Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authenticate]: calling pap (rlm_pap) Tue Jun 23 12:13:41 2020 : Debug: (0) pap: Login attempt with password "passwd" (7) Tue Jun 23 12:13:41 2020 : Debug: (0) pap: Comparing with "known good" Crypt-Password "AsqCrii8QwjG6" Tue Jun 23 12:13:41 2020 : Debug: (0) pap: User authenticated successfully Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[authenticate]: returned from pap (rlm_pap) Tue Jun 23 12:13:41 2020 : Debug: (0) [pap] = ok Tue Jun 23 12:13:41 2020 : Debug: (0) } # Auth-Type PAP = ok Tue Jun 23 12:13:41 2020 : Debug: (0) # Executing section post-auth from file /usr/freerad3/etc/raddb/sites-enabled/default Tue Jun 23 12:13:41 2020 : Debug: (0) post-auth { Tue Jun 23 12:13:41 2020 : Debug: (0) if (!&reply:State) { Tue Jun 23 12:13:41 2020 : Debug: (0) if (!&reply:State) -> TRUE Tue Jun 23 12:13:41 2020 : Debug: (0) if (!&reply:State) { Tue Jun 23 12:13:41 2020 : Debug: (0) update reply { Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND 0x%{randstr:16h} Tue Jun 23 12:13:41 2020 : Debug: (0) --> 0x4040256939aa0f5d64a1f2a8c133ae6b4a Tue Jun 23 12:13:41 2020 : Debug: (0) State := 0x4040256939aa0f5d64a1f2a8c133ae6b4a Tue Jun 23 12:13:41 2020 : Debug: (0) } # update reply = noop Tue Jun 23 12:13:41 2020 : Debug: (0) } # if (!&reply:State) = noop Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[post-auth]: calling reply_log (rlm_detail) Tue Jun 23 12:13:41 2020 : Debug: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d Tue Jun 23 12:13:41 2020 : Debug: Parsed xlat tree: Tue Jun 23 12:13:41 2020 : Debug: literal --> /var/log/radius/radacct/ Tue Jun 23 12:13:41 2020 : Debug: XLAT-IF { Tue Jun 23 12:13:41 2020 : Debug: attribute --> Packet-Src-IP-Address Tue Jun 23 12:13:41 2020 : Debug: } Tue Jun 23 12:13:41 2020 : Debug: XLAT-ELSE { Tue Jun 23 12:13:41 2020 : Debug: attribute --> Packet-Src-IPv6-Address Tue Jun 23 12:13:41 2020 : Debug: } Tue Jun 23 12:13:41 2020 : Debug: literal --> /reply-detail- Tue Jun 23 12:13:41 2020 : Debug: percent --> Y Tue Jun 23 12:13:41 2020 : Debug: percent --> m Tue Jun 23 12:13:41 2020 : Debug: percent --> d Tue Jun 23 12:13:41 2020 : Debug: (0) reply_log: EXPAND /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d Tue Jun 23 12:13:41 2020 : Debug: (0) reply_log: --> /var/log/radius/radacct/192.168.81.4/reply-detail-20200623 Tue Jun 23 12:13:41 2020 : Debug: (0) reply_log: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/192.168.81.4/reply-detail-20200623 Tue Jun 23 12:13:41 2020 : Debug: %t Tue Jun 23 12:13:41 2020 : Debug: Parsed xlat tree: Tue Jun 23 12:13:41 2020 : Debug: percent --> t Tue Jun 23 12:13:41 2020 : Debug: (0) reply_log: EXPAND %t Tue Jun 23 12:13:41 2020 : Debug: (0) reply_log: --> Tue Jun 23 12:13:41 2020 Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[post-auth]: returned from reply_log (rlm_detail) Tue Jun 23 12:13:41 2020 : Debug: (0) [reply_log] = ok Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[post-auth]: calling exec (rlm_exec) Tue Jun 23 12:13:41 2020 : Debug: (0) modsingle[post-auth]: returned from exec (rlm_exec) Tue Jun 23 12:13:41 2020 : Debug: (0) [exec] = noop Tue Jun 23 12:13:41 2020 : Debug: (0) update reply { Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Cert-Serial} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Cert-Expiration} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Cert-Subject} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Cert-Issuer} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Cert-Common-Name} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Cert-Subject-Alt-Name-Email} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Client-Cert-Serial} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Client-Cert-Expiration} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Client-Cert-Subject} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Client-Cert-Issuer} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Client-Cert-Common-Name} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND %{TLS-Client-Cert-Subject-Alt-Name-Email} Tue Jun 23 12:13:41 2020 : Debug: (0) --> Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += Tue Jun 23 12:13:41 2020 : Debug: (0) } # update reply = noop Tue Jun 23 12:13:41 2020 : Debug: (0) policy insert_acct_class { Tue Jun 23 12:13:41 2020 : Debug: (0) update reply { Tue Jun 23 12:13:41 2020 : Debug: (0) EXPAND ai:%{md5:%t,%I,%{Packet-Src-Port},%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}},%{NAS-IP-Address},%{Calling-Station-ID},%{User-Name}} Tue Jun 23 12:13:41 2020 : Debug: (0) --> ai:cbbb1c3bd6d20795e043a79c9a72eaea Tue Jun 23 12:13:41 2020 : Debug: (0) &Class = 0x61693a6362626231633362643664323037393565303433613739633961373265616561 Tue Jun 23 12:13:41 2020 : Debug: (0) } # update reply = noop Tue Jun 23 12:13:41 2020 : Debug: (0) } # policy insert_acct_class = noop Tue Jun 23 12:13:41 2020 : Debug: (0) if (&reply:EAP-Session-Id) { Tue Jun 23 12:13:41 2020 : Debug: (0) if (&reply:EAP-Session-Id) -> FALSE Tue Jun 23 12:13:41 2020 : Debug: (0) } # post-auth = ok Tue Jun 23 12:13:41 2020 : Debug: (0) Sent Access-Accept Id 1 from 192.168.81.1:1645 to 192.168.81.4:1882 length 0 Tue Jun 23 12:13:41 2020 : Debug: (0) State := 0x4040256939aa0f5d64a1f2a8c133ae6b4a Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Reply-Message += "" Tue Jun 23 12:13:41 2020 : Debug: (0) Class = 0x61693a6362626231633362643664323037393565303433613739633961373265616561 Tue Jun 23 12:13:41 2020 : Debug: (0) Finished request Tue Jun 23 12:13:41 2020 : Debug: Waking up in 4.9 seconds. Tue Jun 23 12:13:46 2020 : Debug: (0) Cleaning up request packet ID 1 with timestamp +61 [1mTue Jun 23 12:13:46 2020 : Info: Ready to process requests[0m ^Croot@doctor:~ # /[Kexit exit Script done on Tue Jun 23 12:14:09 2020 Even if the usrname/password is correct, the NAS is not getting clearance to continue. What bridge needs to built? -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! nk.ca started 1 June 1995 . https://www.empire.kred/ROOTNK?t=94a1f39b They are not born of the Lord, who alter His Word to please fools. -unknown

3 2

Windows PAP not working, Android PAP does work
by Mathias Maes 23 Jun '20

23 Jun '20

Hello Little background on my setup: I made Freeradius connect to Google Secure LDAP, and I do some post authentication (add a VLAN attribute to a response when a user belongs to a certain group in Google) Yesterday I generated new certificates to test a 'real' production setup. Android: Installing cert, setting EAP-TTLS and PAP, username, password, et voila, everything works, connected to the right VLAN. However, it takes quite long (like over 5 seconds). The Freeradius log of the Android connection is in attachment But with Windows 10, installing server and ca certificates, setting up the network to use EAP-TTLS PAP, trying to connect with username and password. Windows simply shows a "Cannot connect to this network", the Freeradius log is quite different, as I read it, it seems that Windows still tries to use CHAP instead of PAP, The Windows log is also in attachment. These are my Windows settings: https://i.imgur.com/EFW1vja.png I don't really know what's going on. I guess it's a Windows thing, or my thinking is wrong and there is something wrong with my setup. Thanks on any help or insights. Met vriendelijke groet Mathias Maes ICT-Coördinator Maerlant Atheneum

2 1

Change between FreeRadius 2.2.5 to 3.0.17 in Filter ?
by Olivier CALVANO 23 Jun '20

23 Jun '20

Hi i test for update my old FreeRadius 2.2.5 to 3.0.17 included int CentOS 8. On filter, i have a error that i don't have in 2.2.5: (6) if ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.58")) { (6) ERROR: Failed retrieving values required to evaluate condition (6) elsif ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.59")) { (6) ERROR: Failed retrieving values required to evaluate condition (6) elsif ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.74")) { (6) ERROR: Failed retrieving values required to evaluate condition (6) elsif ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.208")) { (6) ERROR: Failed retrieving values required to evaluate condition Exemple of my config entry: if ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.58")) { update reply { tunnel-Server-Endpoint:0 := '192.168.1.96' tunnel-Client-Auth-Id:0 := "POP-192.168.1.96" tunnel-Server-Auth-Id:0 := "POP-192.168.1.96" Tunnel-Type := "L2TP" Tunnel-Medium-Type := "IPv4" Class := "FTTH-PRO-DL1000m500k-UL300m500k" Tunnel-Preference !* ANY Framed-MTU !* ANY Cisco-AVPair !* ANY MS-Primary-DNS-Server !* ANY MS-Secondary-DNS-Server !* ANY Framed-IP-Address !* ANY Framed-IP-Netmask !* ANY Service-Type !* ANY Framed-Protocol !* ANY } } they are a synthaxe change in FreeRadius 3.x ? thanks Olivier

4 7

FreeRadius and SQL
by Olivier CALVANO 23 Jun '20

23 Jun '20

Hi a small question, i use FreeRadius with MariaDB Sql serveur into my table radgroupreply, i have actually: id groupname attribute op value 1 Group-Internal-Ftth Service-Type := Framed-User 2 Group-Internal-Ftth Framed-Protocol := PPP 3 Group-Internal-Ftth Tunnel-Type := 3 4 Group-Internal-Ftth Tunnel-Medium-Type := 1 5 Group-Internal-Ftth Tunnel-Client-Auth-Id := POP-192.168.1.96 6 Group-Internal-Ftth Tunnel-Server-Auth-Id := POP-192.168.1.96 7 Group-Internal-Ftth Tunnel-Server-Endpoint := 192.168.1.96 i use only one tunnel server endpoint, i want now add a second server, what is the good attribute ? Tunnel-Server-Endpoint Tunnel-Server-Endpoint:1 and rename first Tunnel-Server-Endpoint in Tunnel-Server-Endpoint:0 only add Tunnel-Server-Endpoint:1 thanks for your help olivier

2 2

post-connection issues
by The Doctor 22 Jun '20

22 Jun '20

Running radiusd -X I got (0) Received Access-Request Id 1 from 204.209.81.4:1568 to 204.209.81.1:1645 length 56 (0) User-Name = "Puser" (0) User-Password = "Ppassword" (0) NAS-IP-Address = 192.168.81.4 (0) NAS-Port = 20 (0) # Executing section authorize from file /usr/freerad3/etc/raddb/sites-enabled/default (0) authorize { (0) policy filter_username { (0) if (&User-Name) { (0) if (&User-Name) -> TRUE (0) if (&User-Name) { (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@[^@]*@/ ) { (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (0) if (&User-Name =~ /\.\./ ) { (0) if (&User-Name =~ /\.\./ ) -> FALSE (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (0) if (&User-Name =~ /\.$/) { (0) if (&User-Name =~ /\.$/) -> FALSE (0) if (&User-Name =~ /(a)\./) { (0) if (&User-Name =~ /(a)\./) -> FALSE (0) } # if (&User-Name) = notfound (0) } # policy filter_username = notfound (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "Puser", looking up realm NULL (0) suffix: Found realm "DEFAULT" (0) suffix: Adding Stripped-User-Name = "Puser" (0) suffix: Adding Realm = "DEFAULT" (0) suffix: Authentication realm is LOCAL (0) [suffix] = ok (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) [unix] = updated (0) [files] = noop (0) [expiration] = noop (0) [logintime] = noop (0) [pap] = updated (0) } # authorize = updated (0) Found Auth-Type = PAP (0) # Executing group from file /usr/freerad3/etc/raddb/sites-enabled/default (0) Auth-Type PAP { (0) pap: Login attempt with password (0) pap: Comparing with "known-good" Crypt-password (0) pap: User authenticated successfully (0) [pap] = ok (0) } # Auth-Type PAP = ok (0) # Executing section post-auth from file /usr/freerad3/etc/raddb/sites-enabled/default (0) post-auth { (0) if (session-state:User-Name && reply:User-Name && request:User-Name && (reply:User-Name == request:User-Name)) { (0) if (session-state:User-Name && reply:User-Name && request:User-Name && (reply:User-Name == request:User-Name)) -> FALSE (0) update { (0) No attributes updated for RHS &session-state: (0) } # update = noop (0) [exec] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # post-auth = noop (0) Sent Access-Accept Id 1 from 204.209.81.1:1645 to 204.209.81.4:1568 length 0 (0) Finished request Waking up in 4.9 seconds. (0) Cleaning up request packet ID 1 with timestamp +36 Ready to process requests Why is the post-auth doing this? -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! nk.ca started 1 June 1995 . https://www.empire.kred/ROOTNK?t=94a1f39b They are not born of the Lord, who alter His Word to please fools. -unknown

2 2

FreeRadius, Eduroam, and me...
by Tim Young 22 Jun '20

22 Jun '20

This is using FreeRADIUS Version 3.0.16 I find myself in the middle of an odd situation. I am not directly part of any of this, but I have root permissions and everyone involved is asking me to fix what they have deployed. :( The site that I have permissions for has recently deployed a free-radius server to use as an eduroam endpoint, authenticating off their Active Directory. They managed to get it to work such that they can properly authenticate using "radtest -t mschap ..." The consultant setting that up smiled smugly at that success and then left. But the access from outside, using the same credentials, fails. A consultant working at the far end is telling my friends that it is broken, and in asking that consultant if they can give us info from any of their working sites, we find out that none of their client sites are working with this configuration. So, I do not know if it is my fault, or theirs... Oh Joy. Running "freeradius -xX" and looking at the failure and the success, and I can see a dramatic difference: The working connection: Sat Jun 20 14:10:22 2020 : Info: Ready to process requests Sat Jun 20 14:10:25 2020 : Debug: (1) Received Access-Request Id 180 from 127.0.0.1:59459 to 127.0.0.1:1812 length 166 Sat Jun 20 14:10:25 2020 : Debug: (1) User-Name = "user(a)domain.name" Sat Jun 20 14:10:25 2020 : Debug: (1) NAS-IP-Address = 10.1.2.11 Sat Jun 20 14:10:25 2020 : Debug: (1) NAS-Port = 1812 Sat Jun 20 14:10:25 2020 : Debug: (1) Message-Authenticator = 0xc89e50f3f488393d2b4738522be27bcc Sat Jun 20 14:10:25 2020 : Debug: (1) MS-CHAP-Challenge = 0x8860d7d61af05416 Sat Jun 20 14:10:25 2020 : Debug: (1) MS-CHAP-Response = 0x000SOMEBIGLONGNUMBER Sat Jun 20 14:10:25 2020 : Debug: (1) session-state: No State attribute Sat Jun 20 14:10:25 2020 : Debug: (1) # Executing section authorize from The failed connection: Sat Jun 20 12:26:22 2020 : Info: Ready to process requests Sat Jun 20 12:27:05 2020 : Debug: (2) Received Access-Request Id 11 from [outsideIP]:37127 to 10.1.2.11:1812 length 91 Sat Jun 20 12:27:05 2020 : Debug: (2) User-Name = "user(a)domain.name" Sat Jun 20 12:27:05 2020 : Debug: (2) User-Password = "ActualTextPassword" Sat Jun 20 12:27:05 2020 : Debug: (2) NAS-IP-Address = [secondIP] Sat Jun 20 12:27:05 2020 : Debug: (2) Proxy-State = 0x313632 Sat Jun 20 12:27:05 2020 : Debug: (2) session-state: No State attribute Sat Jun 20 12:27:05 2020 : Debug: (2) # Executing section authorize from file /etc/freeradius/3.0/sitesenabled/eduroam We are authenticating off of an internal MS Domain Controller, so we need mschap configured, and on the failed connection we are getting: Sat Jun 20 12:27:05 2020 : Debug: (2) modsingle[authorize]: calling mschap (rlm_mschap) Sat Jun 20 12:27:05 2020 : Debug: (2) modsingle[authorize]: returned from mschap (rlm_mschap) Sat Jun 20 12:27:05 2020 : Debug: (2) [mschap] = noop And eventually: Sat Jun 20 12:27:05 2020 : ERROR: (2) No Auth-Type found: rejecting the user via Post-Auth-Type = Reject Sat Jun 20 12:27:05 2020 : Debug: (2) Failed to authenticate the user Sat Jun 20 12:27:05 2020 : Debug: (2) Using Post-Auth-Type Reject Not knowing what I am stepping into, I am a bit unsure where to begin. In checking with the people involved, the incoming request may be correct, or it may have issues. The local configuration may have issues, or it may be correct... Any clues as to how I should begin to figure out which are has the problem, and then any pointers for how to fix it? What do you need from your end to be able to ask good questions? - Tim

4 11

Authenticate locally then proxy
by Júlíus Þór Bess Ríkharðsson 22 Jun '20

22 Jun '20

Hi, I'm wondering if I can authenticate users locally and then proxy the request. I'm hoping to authenticate the user on both servers, and if both can, then reply with Access-Accept. I've been searching around and It seems like it's only possible in version 4 because of the way versions up to 3 do proxying. Am I wrong? I'm hoping that it's possible somehow using unlang in version 3. The reason for doing this is I want to continue authenticating users locally (AD as users db) and then proxy the request for MFA/2FA push notifications. Kær kveðja / best regards Júlíus Þór Ríkarðsson Kær kveðja / Best regards Júlíus Þór Bess Ríkharðsson Sérfræðingur / Networking Expert Net- og samskiptalausnir / Network and telecommunication julius.bess(a)origo.is / www.origo.is Tel.: +354 516 1000 Fyrirvari / Disclaimersig1

2 1

Change between FreeRadius 2.2.5 to 3.0.17 in Filter ?
by Olivier CALVANO 22 Jun '20

22 Jun '20

Hi i test for update my old FreeRadius 2.2.5 to 3.0.17 included int CentOS 8. On filter, i have a error that i don't have in 2.2.5: (6) if ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.58")) { (6) ERROR: Failed retrieving values required to evaluate condition (6) elsif ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.59")) { (6) ERROR: Failed retrieving values required to evaluate condition (6) elsif ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.74")) { (6) ERROR: Failed retrieving values required to evaluate condition (6) elsif ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.208")) { (6) ERROR: Failed retrieving values required to evaluate condition Exemple of my config entry: if ((Tunnel-Server-Endpoint:0[0] != '192.168.1.96') && (User-Name =~ /\\.internal-lan\\.ftth/) && ("%{Packet-Src-IP-Address}" == "192.168.90.58")) { update reply { tunnel-Server-Endpoint:0 := '192.168.1.96' tunnel-Client-Auth-Id:0 := "POP-192.168.1.96" tunnel-Server-Auth-Id:0 := "POP-192.168.1.96" Tunnel-Type := "L2TP" Tunnel-Medium-Type := "IPv4" Class := "FTTH-PRO-DL1000m500k-UL300m500k" Tunnel-Preference !* ANY Framed-MTU !* ANY Cisco-AVPair !* ANY MS-Primary-DNS-Server !* ANY MS-Secondary-DNS-Server !* ANY Framed-IP-Address !* ANY Framed-IP-Netmask !* ANY Service-Type !* ANY Framed-Protocol !* ANY } } they are a synthaxe change in FreeRadius 3.x ? thanks Olivier

1 0