- Freeradius-Users - lists.freeradius.org

Re: in vs. out
by wlan＠mac.com 05 Oct '07

05 Oct '07

> > Acct-Input-Octets has one meaning: the right one. > > You don't have to interoperate with broken vendors. You tell > users to > throw the equipment away, and to buy working equipment. For some, that is not very economical - nor environmentally friendly :) I started the list; sorry, I couldn't help myself and started it here: http://coova.org/wiki/index.php/Template:NASVendorAccountingTable I took a perhaps less hostile classification than 'broken' - and labeled them as having a "AC" or "Client" perspective. Of course, the Access Controller/NAS is the right meaning as defined in this forum. As you can see, there is a bit of an issue. In a Gemtek manual, they mention the problem - explaining the Client and AC point's of view, but still ultimately defaults to the Client perspective with an option to reverse. As for coova-chilli, I actually (yes, I'm ready for the public ass-kicking) changed the accounting to be like that of Gemtek - with the option to toggle. At the time, my objective was purely compatibility with back-ends already built for some of the vendors in this list. If anyone has better information, which is highly likely, please do make changes. Huh, I wonder if there was something originally 'lost in translation' with how this got implemented. With some Googling, I came across: http://www.gsmworld.com/documents/wlan/ir61.pdf Which states for Acct-Input-Octets: "Volume of the downstream traffic of the User" and Output-Octets with "upstream traffic of the user". That sounds rather Client centric -- it's not to / from the User, for instance. Are we expecting too much from the (off-shore) out-sourcing companies? :) David

2 1

Slipstream dictionary
by Scott Lambert 05 Oct '07

05 Oct '07

I don't know if this is something that would be wanted in the freeradius source. I created a dictionary.slipstream for my dialup accelerator users based on slipstream_sp_6.0_installation_and_configuration_guide.pdf from slipstream's portal. It is extremely simple, and defines one VSA. -- Scott Lambert KC5MLE Unix SysAdmin lambert(a)lambertfam.org

2 1

Change Password Request to FreeRADIUS from PAM RADIUS.
by Sridhar B 05 Oct '07

05 Oct '07

Greetings, Does the password change request from PAM RADIUS work with FreeRADIUS server? It doesn't seem like, as I see the following log at the RADIUS server: "Deprecated password change request from client copyia:8789 - ID 32 : IGNORED" Can someone provide inputs on why this is deprecated. Thanks in advance for you inputs. Best Regards, Bandi

3 2

Acct-Status-Type attribute
by Walter Gould 04 Oct '07

04 Oct '07

I am running freeradius-1.1.3. I am using freeradius to authenticate users logging into Cisco switches and routers. I am trying to use radrelay to send the radius accounting data to our syslog server. When I run radrelay in debug mode, it gives this error: Record Rate since startup: 42.57 Packet Rate since startup: 0.00 read_one: No Acct-Status-Type attribute present. Rejecting record. read_one: No Acct-Status-Type attribute present. Rejecting record. radrelay: Running and Processing Records. Seconds since startup: 7 Records Read: 299 Packets Sent: 0 When I check the contents of the /var/log/radius/radacct/detail-combined file, it contains the following attributes: Packet-Type = Access-Request Wed Oct 3 15:36:02 2007 NAS-IP-Address = 10.3.51.1 NAS-Port = 1 NAS-Port-Type = Virtual User-Name = "testuser" Calling-Station-Id = "10.3.0.51" Client-IP-Address = 10.3.51.1 Is it possible to have the Acct-Status-Type attribute included in the Access Request that is logged to the /var/log/radius/radacct/detail-combined file? If so - how would I go about achieving this? I have checked the /etc/raddb/dictionary and related files (in /usr/share/freeradius/) and see the Acct-Status-Type attribute listed, but am not sure why it is not being included in the above accounting access-request. Thanks in advance, Walter Gould Auburn University

4 5

radwho question....
by Chris Bradshaw 04 Oct '07

04 Oct '07

Hi.... I am using freeradius 1.0.1 on a Red Hat Ent Linux v4 server as an authentication backend for our wireless network. Our wireless clients all use EAP/TTLS (via the SecureW2 client) and the access points are Cisco Aironet 1200's. I have noticed that if I run radwho, I seem to only see the name of the user from the 'outside' of the tunnel (in this case 'anonymous')....as a result its not possible to tell who is connected at any one time. Also I have noticed that the fields tend to get truncated: Login Name What TTY When From Location anonymous anonymous shell >999 Tue 16:00 10.10.2.9 The IP address above should be 10.10.2.96. I was just wondering if anyone might know how to fix either of these problems? TIA Chris Bradshaw.

3 11

ldap search for user root
by Artur Hayne 04 Oct '07

04 Oct '07

Hi, We have a freeradius server sending auth requests to a ldap server. We sniffed traffic between them and found search request messages from ldap protocol asking for an user called root, but the client request authentication for another user, an existing one. This request for user root isnt logical since root is not a valid user in our ldap db. Ethereal output (request packet from radius server to ldap server): Filter:(&(objectclass=User)(sAMAccountName=root)) FreeRadius is using PAM to auth against ldap with rlm_pam module. PAM is completely configured and we're able to use its features with other tools, such as login. Freeradius output: rad_recv: Access-Request packet from host 10.2.1.76:32784, id=106, length=215 User-Name = "aelias(a)intranet.ufba.br" Digest-Attributes = 0x0a0861656c696173 Digest-Attributes = 0x0112696e7472616e65742e756662612e6272 Digest-Attributes = 0x022a34373032353266383139316339313161353365313735363334656362333434336638363931303665 Digest-Attributes = 0x04167369703a696e7472616e65742e756662612e6272 Digest-Attributes = 0x030a5245474953544552 Digest-Response = "598d24b186f652a28feced8e51f92880" Service-Type = IAPP-Register X-Ascend-PW-Lifetime = 0x61656c696173 NAS-IP-Address = 10.2.1.76 NAS-Port = 5060 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 modcall[authorize]: module "mschap" returns noop for request 3 rlm_realm: Looking up realm "intranet.ufba.br" for User-Name = "aelias(a)intranet.ufba.br" rlm_realm: No such realm "intranet.ufba.br" modcall[authorize]: module "suffix" returns noop for request 3 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 3 users: Matched entry DEFAULT at line 168 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns ok for request 3 rad_check_password: Found Auth-Type Pam auth: type "PAM" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_pam: Attribute "User-Password" is required for authentication. modcall[authenticate]: module "pam" returns invalid for request 3 modcall: group authenticate returns invalid for request 3 auth: Failed to validate the user. Login incorrect: [aelias(a)intranet.ufba.br/<no User-Password attribute>] (from client private-network-2 port 5060) Delaying request 3 for 1 seconds Finished request 3 Going to the next request --- Walking the entire request list --- Sending Access-Reject of id 105 to 10.2.1.76:32783 Sorry my poor English. :-) Thanks. Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento!

1 0

EAP/TTLS problem with Win XP and Linux
by elhammoud rachida 04 Oct '07

04 Oct '07

hello, i'am trying to use radius authenticate and authorise users by EAP/TTLS from XP and Linux ( Debian), i'am using only a « users » like database. i'am reading the documentation : http://wiki.freeradius.org i've imported root.pem both Windows XP and Linux this log to Linux: rad_recv: Access-Request packet from host 145.238.3.182:1026, id=191, length=208 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" EAP-Message = 0x0201000a017261636861 Message-Authenticator = 0xfae743fe55bca3b8b83a48a3f10ed3bc Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_eap: EAP packet type response id 1 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: group authenticate returns handled for request 0 Sending Access-Challenge of id 191 to 145.238.3.182:1026 EAP-Message = 0x0102001f1a0102001a105f4f4c366e47d80b1c27e30d08b4b0367261636861 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfbee0cbaf20c360d6491c2b0b512304d Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=192, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xfbee0cbaf20c360d6491c2b0b512304d EAP-Message = 0x020200060315 Message-Authenticator = 0xd72410f740ae385523110d6defecb5f0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: EAP packet type response id 2 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 1 modcall: group authenticate returns handled for request 1 Sending Access-Challenge of id 192 to 145.238.3.182:1026 EAP-Message = 0x010300061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x429c3c29e255f725c510981e01307d3e Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=193, length=313 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0x429c3c29e255f725c510981e01307d3e EAP-Message = 0x0203006115800000005716030100520100004e0301470497b869826a1a156494e801e8ab8ebc88e444edbab8d5e7b9c890b9ce7d5c00002600390038003500160013000a00330032002f0005000400150012000900140011000800060003020100 Message-Authenticator = 0x69a1421041ecda03d67273a14054310d Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_eap: EAP packet type response id 3 length 97 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0052], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0627], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: group authenticate returns handled for request 2 Sending Access-Challenge of id 193 to 145.238.3.182:1026 EAP-Message = 0x0104040a15c000000684160301004a02000046030147049795ea5f54b60ec1a963a6050cf321b373a5129b55236ceb8814646c656e2021397a7083f4b0e4ef289bb347da88c32d2538e9c0c5796afd72671ff95b43a800350116030106270b0006230006200002ad308202a930820212a00302010202090097d09903d21d9c53300d06092a864886f70d0101040500308180310b3009060355040613024652311330110603550408130a536f6d652d5374617465310f300d060355040713064d4555444f4e31133011060355040a130a4f4253204d4555444f4e31133011060355040b130a4465706172742053494f3121301f06092a864886f70d0109 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x5284ead1564c79f6c83c07344ad50707bc67777485939021fd5c4fde550500036d30820369308202d2a00302010202090097d09903d21d9c52300d06092a864886f70d0101040500308180310b3009060355040613024652311330110603550408130a536f6d652d5374617465310f300d060355040713064d4555444f4e31133011060355040a130a4f4253204d4555444f4e31133011060355040b130a4465706172742053494f3121301f06092a864886f70d01090116127261636861383140686f746d61696c2e6672301e170d3037303932353131313130375a170d3037313032353131313130375a308180310b30090603550406130246523113 EAP-Message = 0x30110603550408130a536f6d652d5374617465310f30 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcdb56b546410d47e8ad2dc8aa7e606f8 Finished request 2 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=194, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xcdb56b546410d47e8ad2dc8aa7e606f8 EAP-Message = 0x020400061500 Message-Authenticator = 0x78acfb7b5c5d9ba93dbf5fb16b853196 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 rlm_eap: EAP packet type response id 4 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns updated for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: group authenticate returns handled for request 3 Sending Access-Challenge of id 194 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0xf70d01010405000381810055e9fecdcd89146c84f21a7b232da59b1eee35c889d5eb07950d116f3baf9123308ea514daa6f7515e33994652f76748b981e7c5e5a00e6c5c4c03299318e812e100549970034482fef14fcaa937d71d79a6bfb4f0ce39b2bbe0f4028e1f90a2c7d1e1f6ded3df9e11af13c85fa10eaec4f6979f3010b4b5521d07e05e4a6ec916030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe701c94007f01d9882634f0432a6d114 Finished request 3 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=195, length=424 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xe701c94007f01d9882634f0432a6d114 EAP-Message = 0x020500d01580000000c61603010086100000820080507e96001f817c7dfce96e989e771b2f38902a81f66519d75d522508d6b663508f50ef374da3dfc95996083930080e5edc58248184dd494816913f65d647fde08f8b2db8a1e37422e4d9ff6dd65cbd60a5c21b5d7e66d015b9cc61e2ac46dc25de7c9f6e01be17dbbb0599d795f3aa77467f4354579881ff6240969e5e9f5a1414030100010116030100305b0059cfbe818835fc45399fb05c6c72596ce0ec8a4a0befa17575c6a10931c46c05cc777adf688c60a888f381a2e561 Message-Authenticator = 0xa55246d48162d9bc3e2842114589d25b Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 modcall[authorize]: module "chap" returns noop for request 4 rlm_eap: EAP packet type response id 5 length 208 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 4 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 4 modcall: group authorize returns updated for request 4 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 4 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 rlm_eap_tls: <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange TLS_accept: SSLv3 read client key exchange A rlm_eap_tls: <<< TLS 1.0 ChangeCipherSpec [length 0001] rlm_eap_tls: <<< TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 read finished A rlm_eap_tls: >>> TLS 1.0 ChangeCipherSpec [length 0001] TLS_accept: SSLv3 write change cipher spec A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 write finished A TLS_accept: SSLv3 flush data (other): SSL negotiation finished successfully SSL Connection Established eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 4 modcall: group authenticate returns handled for request 4 Sending Access-Challenge of id 195 to 145.238.3.182:1026 EAP-Message = 0x0106004515800000003b140301000101160301003058729f21c600df1c67c00c784ba7ecf50581a5b3657f8a24ebd96af0977e332430409dee3dfec98cb5786579ba3c9189 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x34c8b26e1d7071a34ec8210c3710baaa Finished request 4 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 191 with timestamp 47049795 Cleaning up request 1 ID 192 with timestamp 47049795 Cleaning up request 2 ID 193 with timestamp 47049795 Cleaning up request 3 ID 194 with timestamp 47049795 Cleaning up request 4 ID 195 with timestamp 47049795 Nothing to do. Sleeping until we see a request. the server no sends response, why?? and this log by Windows XP rad_recv: Access-Request packet from host 145.238.3.182:1026, id=196, length=208 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" EAP-Message = 0x021b000a017261636861 Message-Authenticator = 0x54bacc36ad1175e684554c5f76c58832 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_eap: EAP packet type response id 27 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: group authenticate returns handled for request 0 Sending Access-Challenge of id 196 to 145.238.3.182:1026 EAP-Message = 0x011c001f1a011c001a105f4f4c366e47d80b1c27e30d08b4b0367261636861 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfbee0cbaf20c360de5cb21cf55607e20 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=197, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xfbee0cbaf20c360de5cb21cf55607e20 EAP-Message = 0x021c00060315 Message-Authenticator = 0xb00f0ec480c5c36eb8a7110e87bde3b3 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: EAP packet type response id 28 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 1 modcall: group authenticate returns handled for request 1 Sending Access-Challenge of id 197 to 145.238.3.182:1026 EAP-Message = 0x011d00061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x429c3c29e255f725e935b0e1db7a8a39 Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=198, length=276 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0x429c3c29e255f725e935b0e1db7a8a39 EAP-Message = 0x021d003c158000000032160301002d010000290301e0dd816d595bd3edf0729c53c2953ffb3711cca4eb039cd0b2ac413175dfd9cd000002000a0100 Message-Authenticator = 0x842f4348b12e8e2bf0ce66965c711fc9 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_eap: EAP packet type response id 29 length 60 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 002d], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0627], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: group authenticate returns handled for request 2 Sending Access-Challenge of id 198 to 145.238.3.182:1026 EAP-Message = 0x011e040a15c000000684160301004a02000046030147049daa9066df5b206f509c2daf785a039b3f290d1da1972b195d73c56b3fee20d5f2327a11b59ff3ae5d4e9d5faaa5a1e5941852291e3c28f8403f5658ff3bd0000a0016030106270b0006230006200002ad308202a930820212a00302010202090097d09903d21d9c53300d06092a864886f70d0101040500308180310b3009060355040613024652311330110603550408130a536f6d652d5374617465310f300d060355040713064d4555444f4e31133011060355040a130a4f4253204d4555444f4e31133011060355040b130a4465706172742053494f3121301f06092a864886f70d0109 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x30110603550408130a536f6d652d5374617465310f30 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcdb56b546410d47ec20726810835dc55 Finished request 2 Going to the next request --- Walking the entire request list --- Waking up in 4 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=199, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xcdb56b546410d47ec20726810835dc55 EAP-Message = 0x021e00061500 Message-Authenticator = 0xabeaab3cbe7e553ebd43785cd5c25f86 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 rlm_eap: EAP packet type response id 30 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns updated for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: group authenticate returns handled for request 3 Sending Access-Challenge of id 199 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0xf70d01010405000381810055e9fecdcd89146c84f21a7b232da59b1eee35c889d5eb07950d116f3baf9123308ea514daa6f7515e33994652f76748b981e7c5e5a00e6c5c4c03299318e812e100549970034482fef14fcaa937d71d79a6bfb4f0ce39b2bbe0f4028e1f90a2c7d1e1f6ded3df9e11af13c85fa10eaec4f6979f3010b4b5521d07e05e4a6ec916030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe701c94007f01d98e348e2739e552ea6 Finished request 3 Going to the next request Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 196 with timestamp 47049da8 Cleaning up request 1 ID 197 with timestamp 47049da8 Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 2 ID 198 with timestamp 47049daa Cleaning up request 3 ID 199 with timestamp 47049daa Nothing to do. Sleeping until we see a request. what's a problem? Please could you help me? thanks _________________________________________________________________ Gagnez des écrans plats avec Live.com http://www.image-addict.fr/

3 6

EAP/TTLS problem with Win XP and Linux
by elhammoud rachida 04 Oct '07

04 Oct '07

hello, i'am trying to use radius authenticate and authorise users by EAP/TTLS from XP and Linux ( Debian), i'am using only a « users » like database. i'am reading the documentation : http://wiki.freeradius.org i've imported root.pem both Windows XP and Linux this log to Linux: rad_recv: Access-Request packet from host 145.238.3.182:1026, id=191, length=208 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" EAP-Message = 0x0201000a017261636861 Message-Authenticator = 0xfae743fe55bca3b8b83a48a3f10ed3bc Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_eap: EAP packet type response id 1 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: group authenticate returns handled for request 0 Sending Access-Challenge of id 191 to 145.238.3.182:1026 EAP-Message = 0x0102001f1a0102001a105f4f4c366e47d80b1c27e30d08b4b0367261636861 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfbee0cbaf20c360d6491c2b0b512304d Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=192, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xfbee0cbaf20c360d6491c2b0b512304d EAP-Message = 0x020200060315 Message-Authenticator = 0xd72410f740ae385523110d6defecb5f0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: EAP packet type response id 2 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 1 modcall: group authenticate returns handled for request 1 Sending Access-Challenge of id 192 to 145.238.3.182:1026 EAP-Message = 0x010300061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x429c3c29e255f725c510981e01307d3e Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=193, length=313 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0x429c3c29e255f725c510981e01307d3e EAP-Message = 0x0203006115800000005716030100520100004e0301470497b869826a1a156494e801e8ab8ebc88e444edbab8d5e7b9c890b9ce7d5c00002600390038003500160013000a00330032002f0005000400150012000900140011000800060003020100 Message-Authenticator = 0x69a1421041ecda03d67273a14054310d Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_eap: EAP packet type response id 3 length 97 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0052], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0627], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: group authenticate returns handled for request 2 Sending Access-Challenge of id 193 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x30110603550408130a536f6d652d5374617465310f30 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcdb56b546410d47e8ad2dc8aa7e606f8 Finished request 2 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=194, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xcdb56b546410d47e8ad2dc8aa7e606f8 EAP-Message = 0x020400061500 Message-Authenticator = 0x78acfb7b5c5d9ba93dbf5fb16b853196 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 rlm_eap: EAP packet type response id 4 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns updated for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: group authenticate returns handled for request 3 Sending Access-Challenge of id 194 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0xf70d01010405000381810055e9fecdcd89146c84f21a7b232da59b1eee35c889d5eb07950d116f3baf9123308ea514daa6f7515e33994652f76748b981e7c5e5a00e6c5c4c03299318e812e100549970034482fef14fcaa937d71d79a6bfb4f0ce39b2bbe0f4028e1f90a2c7d1e1f6ded3df9e11af13c85fa10eaec4f6979f3010b4b5521d07e05e4a6ec916030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe701c94007f01d9882634f0432a6d114 Finished request 3 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=195, length=424 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xe701c94007f01d9882634f0432a6d114 EAP-Message = 0x020500d01580000000c61603010086100000820080507e96001f817c7dfce96e989e771b2f38902a81f66519d75d522508d6b663508f50ef374da3dfc95996083930080e5edc58248184dd494816913f65d647fde08f8b2db8a1e37422e4d9ff6dd65cbd60a5c21b5d7e66d015b9cc61e2ac46dc25de7c9f6e01be17dbbb0599d795f3aa77467f4354579881ff6240969e5e9f5a1414030100010116030100305b0059cfbe818835fc45399fb05c6c72596ce0ec8a4a0befa17575c6a10931c46c05cc777adf688c60a888f381a2e561 Message-Authenticator = 0xa55246d48162d9bc3e2842114589d25b Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 modcall[authorize]: module "chap" returns noop for request 4 rlm_eap: EAP packet type response id 5 length 208 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 4 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 4 modcall: group authorize returns updated for request 4 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 4 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 rlm_eap_tls: <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange TLS_accept: SSLv3 read client key exchange A rlm_eap_tls: <<< TLS 1.0 ChangeCipherSpec [length 0001] rlm_eap_tls: <<< TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 read finished A rlm_eap_tls: >>> TLS 1.0 ChangeCipherSpec [length 0001] TLS_accept: SSLv3 write change cipher spec A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 write finished A TLS_accept: SSLv3 flush data (other): SSL negotiation finished successfully SSL Connection Established eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 4 modcall: group authenticate returns handled for request 4 Sending Access-Challenge of id 195 to 145.238.3.182:1026 EAP-Message = 0x0106004515800000003b140301000101160301003058729f21c600df1c67c00c784ba7ecf50581a5b3657f8a24ebd96af0977e332430409dee3dfec98cb5786579ba3c9189 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x34c8b26e1d7071a34ec8210c3710baaa Finished request 4 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 191 with timestamp 47049795 Cleaning up request 1 ID 192 with timestamp 47049795 Cleaning up request 2 ID 193 with timestamp 47049795 Cleaning up request 3 ID 194 with timestamp 47049795 Cleaning up request 4 ID 195 with timestamp 47049795 Nothing to do. Sleeping until we see a request. the server no sends response, why?? and this log by Windows XP rad_recv: Access-Request packet from host 145.238.3.182:1026, id=196, length=208 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" EAP-Message = 0x021b000a017261636861 Message-Authenticator = 0x54bacc36ad1175e684554c5f76c58832 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_eap: EAP packet type response id 27 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: group authenticate returns handled for request 0 Sending Access-Challenge of id 196 to 145.238.3.182:1026 EAP-Message = 0x011c001f1a011c001a105f4f4c366e47d80b1c27e30d08b4b0367261636861 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfbee0cbaf20c360de5cb21cf55607e20 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=197, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xfbee0cbaf20c360de5cb21cf55607e20 EAP-Message = 0x021c00060315 Message-Authenticator = 0xb00f0ec480c5c36eb8a7110e87bde3b3 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: EAP packet type response id 28 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 1 modcall: group authenticate returns handled for request 1 Sending Access-Challenge of id 197 to 145.238.3.182:1026 EAP-Message = 0x011d00061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x429c3c29e255f725e935b0e1db7a8a39 Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=198, length=276 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0x429c3c29e255f725e935b0e1db7a8a39 EAP-Message = 0x021d003c158000000032160301002d010000290301e0dd816d595bd3edf0729c53c2953ffb3711cca4eb039cd0b2ac413175dfd9cd000002000a0100 Message-Authenticator = 0x842f4348b12e8e2bf0ce66965c711fc9 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_eap: EAP packet type response id 29 length 60 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 002d], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0627], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: group authenticate returns handled for request 2 Sending Access-Challenge of id 198 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 0x0116127261636861383140686f746d61696c2e6672301e170d3037303932353131313234395a170d3038303932343131313234395a308192310b3009060355040613024652311330110603550408130a536f6d652d5374617465310f300d060355040713064d4555444f4e31133011060355040a130a4f4253204d4555444f4e31133011060355040b130a4465706172742053494f3110300e06035504031307736572766575723121301f06092a864886f70d01090116127261636861383140686f746d61696c2e667230819f300d06092a864886f70d010101050003818d0030818902818100bfb94bae23d4d4501336fc7fdb003812ab5c91411eed EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x30110603550408130a536f6d652d5374617465310f30 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcdb56b546410d47ec20726810835dc55 Finished request 2 Going to the next request --- Walking the entire request list --- Waking up in 4 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=199, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xcdb56b546410d47ec20726810835dc55 EAP-Message = 0x021e00061500 Message-Authenticator = 0xabeaab3cbe7e553ebd43785cd5c25f86 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 rlm_eap: EAP packet type response id 30 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns updated for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: group authenticate returns handled for request 3 Sending Access-Challenge of id 199 to 145.238.3.182:1026 EAP-Message = 0x011f028e1580000006840d060355040713064d4555444f4e31133011060355040a130a4f4253204d4555444f4e31133011060355040b130a4465706172742053494f3121301f06092a864886f70d01090116127261636861383140686f746d61696c2e667230819f300d06092a864886f70d010101050003818d0030818902818100f2ce03feb0bbacd0c1b89ecea0621fa70d0c0dfd777f82b7da4b0c67908bdc72af35b501036b39c796fab274fe7c7098395139cd80c3def0e8ca65c3f1291a84a1f38342474758c9fa9aac36818b6626839b7f9a6673393d44940ebaea14cd662a0f5bd0487e27a29842095e7bd5309d75649205a5fad97bc41d75 EAP-Message = 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 EAP-Message = 0xf70d01010405000381810055e9fecdcd89146c84f21a7b232da59b1eee35c889d5eb07950d116f3baf9123308ea514daa6f7515e33994652f76748b981e7c5e5a00e6c5c4c03299318e812e100549970034482fef14fcaa937d71d79a6bfb4f0ce39b2bbe0f4028e1f90a2c7d1e1f6ded3df9e11af13c85fa10eaec4f6979f3010b4b5521d07e05e4a6ec916030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe701c94007f01d98e348e2739e552ea6 Finished request 3 Going to the next request Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 196 with timestamp 47049da8 Cleaning up request 1 ID 197 with timestamp 47049da8 Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 2 ID 198 with timestamp 47049daa Cleaning up request 3 ID 199 with timestamp 47049daa Nothing to do. Sleeping until we see a request. what's a problem? Please could you help me? thanks _________________________________________________________________ Windows Live Spaces : créez votre blog à votre image ! http://www.windowslive.fr/spaces

1 0

Re: in vs. out
by wlan＠mac.com 04 Oct '07

04 Oct '07

>> In RFC 2866, it says: >> >> Acct-Input-Octets = This attribute indicates how many octets have >> been received from the port over the course of this service being >> provided. > > Remember, this is from the view that users connect to a port on the > NAS. So data received "from the port" means "from the user". See > also > the Livingston Portmaster documentation: > > http://portmasters.com/tech/docs/radius/accounting.html > > They are the people who wrote the original RADIUS specification, so > they should know what it means. > It is curious, then, why the RFC isn't as definitive in the definition... I suppose it is intentionally left open for vendor interpretation. As such, portmaster being more specific as it relates to their products isn't surprising. But, is that the 'standard', a 'best practice', or just one vendor's (albeit, a very in-the-know vendor's) implementation? I do agree with the point of view (of the port), in theory. However, in practice, I guess the best answer is that it is vendor specific.. hmm. >> In the manual of a popular commercial access controller, it says: >> >> Acct-Input-Octets = Number of octets/bytes received by the customer. > > That is wrong. It is number of bytes received FROM the customer, TO > the NAS. > >> Which is a rather "outward" way of looking at the "port" referred >> to in >> RFC. I have also seen it defined in the reverse way. To be >> standard with >> commercial gear, I have taken the above definition as being the >> 'right >> way' ... other opinions? > > Follow the standards. Do not follow broken vendors. It actually isn't just that one vendor... in fact, if not mistaken, much of the commercial wlan gear I've worked with used the above meaning. It would be curious to see a list of vendors and how they implemented their accounting... if we all checked the manuals of the devices we use, we could all help build that list in the freeradius wiki! David

3 2

rlm_Python - PyExc_IOError
by Mike O'Connor 04 Oct '07

04 Oct '07

Hi Guys Got a problem with rlm_python using 1.1.7 on Debian etch with no changes to source other than to move rlm_python in to the stable modules file. The module is in the path and an strace shows the file being found. rlm_python:python_load_function: module 'radiusd_test' is not found rlm_python:EXCEPT:exceptions.ImportError: /usr/lib/python2.4/lib-dynload/time.so: undefined symbol: PyExc_IOError rlm_python:python_load_function: failed to import python function 'radiusd_test.instantiate' radiusd.conf[1]: python: Module instantiation failed. Anyidea would be great Thanks Mike ------- File is found and loaded open("/usr/lib/python2.4/site-packages/radiusd_test.py", O_RDONLY|O_LARGEFILE) = 5 fstat64(5, {st_mode=S_IFREG|0644, st_size=497, ...}) = 0 open("/usr/lib/python2.4/site-packages/radiusd_test.pyc", O_RDONLY|O_LARGEFILE) = 6 fstat64(6, {st_mode=S_IFREG|0644, st_size=1408, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7b67000 read(6, "m\362\r\n<\365\1Gc\0\0\0\0\0\0\0\0\1\0\0\0@\0\0\0s[\0\0"..., 4096) = 1408 fstat64(6, {st_mode=S_IFREG|0644, st_size=1408, ...}) = 0 read(6, "", 4096) = 0 close(6) = 0 munmap(0xb7b67000, 4096) ------ = 0 stat64("/usr/lib/python24.zip/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python24.zip/time.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python24.zip/timemodule.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python24.zip/time.py", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python24.zip/time.pyc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) stat64("/usr/lib/python2.4/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/time.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/timemodule.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/time.py", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/time.pyc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) stat64("/usr/lib/python2.4/plat-linux2/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/plat-linux2/time.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/plat-linux2/timemodule.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/plat-linux2/time.py", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/plat-linux2/time.pyc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) stat64("/usr/lib/python2.4/lib-tk/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-tk/time.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-tk/timemodule.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-tk/time.py", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-tk/time.pyc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) stat64("/usr/lib/python2.4/lib-dynload/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-dynload/time.so", O_RDONLY|O_LARGEFILE) = 6 fstat64(6, {st_mode=S_IFREG|0644, st_size=15860, ...}) = 0 open("/usr/lib/python2.4/lib-dynload/time.so", O_RDONLY) = 7 read(7, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\22\0"..., 512) = 512 fstat64(7, {st_mode=S_IFREG|0644, st_size=15860, ...}) = 0 mmap2(NULL, 19072, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0xb79a6000 mmap2(0xb79a9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0x2) = 0xb79a9000 close(7) = 0 munmap(0xb79a6000, 19072) = 0 close(6) = 0 close(5) = 0 futex(0x8010a620, FUTEX_WAKE, 1) = 0 time(NULL) = 1191313703 write(1, "rlm_python:python_load_function:"..., 68rlm_python:python_load_function: module 'radiusd_test' is not found ) = 68 futex(0x801083f8, FUTEX_WAKE, 1) = 0 time(NULL) = 1191313703 write(1, "rlm_python:EXCEPT:exceptions.Imp"..., 114rlm_python:EXCEPT:exceptions.ImportError: /usr/lib/python2.4/lib-dynload/time.so: undefined symbol: PyExc_IOError ) = 114 futex(0x801083f8, FUTEX_WAKE, 1) = 0 time(NULL) = 1191313703 write(1, "rlm_python:python_load_function:"..., 93rlm_python:python_load_function: failed to import python function 'radiusd_test.instantiate' ) = 93 futex(0x801083f8, FUTEX_WAKE, 1) = 0 futex(0x801083f8, FUTEX_WAKE, 1) = 0 futex(0x801083f8, FUTEX_WAKE, 1) = 0 time(NULL) = 1191313703 write(1, "radiusd.conf[1]: python: Module "..., 55radiusd.conf[1]: python: Module instantiation failed. ) = 55 munmap(0xb7f81000, 4096) = 0 exit_group(1) = ? Process 23416 detached

3 8