- Freeradius-Users - lists.freeradius.org

Acct-Status-Type attribute
by Walter Gould 04 Oct '07

04 Oct '07

I am running freeradius-1.1.3. I am using freeradius to authenticate users logging into Cisco switches and routers. I am trying to use radrelay to send the radius accounting data to our syslog server. When I run radrelay in debug mode, it gives this error: Record Rate since startup: 42.57 Packet Rate since startup: 0.00 read_one: No Acct-Status-Type attribute present. Rejecting record. read_one: No Acct-Status-Type attribute present. Rejecting record. radrelay: Running and Processing Records. Seconds since startup: 7 Records Read: 299 Packets Sent: 0 When I check the contents of the /var/log/radius/radacct/detail-combined file, it contains the following attributes: Packet-Type = Access-Request Wed Oct 3 15:36:02 2007 NAS-IP-Address = 10.3.51.1 NAS-Port = 1 NAS-Port-Type = Virtual User-Name = "testuser" Calling-Station-Id = "10.3.0.51" Client-IP-Address = 10.3.51.1 Is it possible to have the Acct-Status-Type attribute included in the Access Request that is logged to the /var/log/radius/radacct/detail-combined file? If so - how would I go about achieving this? I have checked the /etc/raddb/dictionary and related files (in /usr/share/freeradius/) and see the Acct-Status-Type attribute listed, but am not sure why it is not being included in the above accounting access-request. Thanks in advance, Walter Gould Auburn University

4 5

radwho question....
by Chris Bradshaw 04 Oct '07

04 Oct '07

Hi.... I am using freeradius 1.0.1 on a Red Hat Ent Linux v4 server as an authentication backend for our wireless network. Our wireless clients all use EAP/TTLS (via the SecureW2 client) and the access points are Cisco Aironet 1200's. I have noticed that if I run radwho, I seem to only see the name of the user from the 'outside' of the tunnel (in this case 'anonymous')....as a result its not possible to tell who is connected at any one time. Also I have noticed that the fields tend to get truncated: Login Name What TTY When From Location anonymous anonymous shell >999 Tue 16:00 10.10.2.9 The IP address above should be 10.10.2.96. I was just wondering if anyone might know how to fix either of these problems? TIA Chris Bradshaw.

3 11

ldap search for user root
by Artur Hayne 04 Oct '07

04 Oct '07

Hi, We have a freeradius server sending auth requests to a ldap server. We sniffed traffic between them and found search request messages from ldap protocol asking for an user called root, but the client request authentication for another user, an existing one. This request for user root isnt logical since root is not a valid user in our ldap db. Ethereal output (request packet from radius server to ldap server): Filter:(&(objectclass=User)(sAMAccountName=root)) FreeRadius is using PAM to auth against ldap with rlm_pam module. PAM is completely configured and we're able to use its features with other tools, such as login. Freeradius output: rad_recv: Access-Request packet from host 10.2.1.76:32784, id=106, length=215 User-Name = "aelias(a)intranet.ufba.br" Digest-Attributes = 0x0a0861656c696173 Digest-Attributes = 0x0112696e7472616e65742e756662612e6272 Digest-Attributes = 0x022a34373032353266383139316339313161353365313735363334656362333434336638363931303665 Digest-Attributes = 0x04167369703a696e7472616e65742e756662612e6272 Digest-Attributes = 0x030a5245474953544552 Digest-Response = "598d24b186f652a28feced8e51f92880" Service-Type = IAPP-Register X-Ascend-PW-Lifetime = 0x61656c696173 NAS-IP-Address = 10.2.1.76 NAS-Port = 5060 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 modcall[authorize]: module "mschap" returns noop for request 3 rlm_realm: Looking up realm "intranet.ufba.br" for User-Name = "aelias(a)intranet.ufba.br" rlm_realm: No such realm "intranet.ufba.br" modcall[authorize]: module "suffix" returns noop for request 3 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 3 users: Matched entry DEFAULT at line 168 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns ok for request 3 rad_check_password: Found Auth-Type Pam auth: type "PAM" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_pam: Attribute "User-Password" is required for authentication. modcall[authenticate]: module "pam" returns invalid for request 3 modcall: group authenticate returns invalid for request 3 auth: Failed to validate the user. Login incorrect: [aelias(a)intranet.ufba.br/<no User-Password attribute>] (from client private-network-2 port 5060) Delaying request 3 for 1 seconds Finished request 3 Going to the next request --- Walking the entire request list --- Sending Access-Reject of id 105 to 10.2.1.76:32783 Sorry my poor English. :-) Thanks. Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento!

1 0

EAP/TTLS problem with Win XP and Linux
by elhammoud rachida 04 Oct '07

04 Oct '07

hello, i'am trying to use radius authenticate and authorise users by EAP/TTLS from XP and Linux ( Debian), i'am using only a « users » like database. i'am reading the documentation : http://wiki.freeradius.org i've imported root.pem both Windows XP and Linux this log to Linux: rad_recv: Access-Request packet from host 145.238.3.182:1026, id=191, length=208 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" EAP-Message = 0x0201000a017261636861 Message-Authenticator = 0xfae743fe55bca3b8b83a48a3f10ed3bc Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_eap: EAP packet type response id 1 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: group authenticate returns handled for request 0 Sending Access-Challenge of id 191 to 145.238.3.182:1026 EAP-Message = 0x0102001f1a0102001a105f4f4c366e47d80b1c27e30d08b4b0367261636861 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfbee0cbaf20c360d6491c2b0b512304d Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=192, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xfbee0cbaf20c360d6491c2b0b512304d EAP-Message = 0x020200060315 Message-Authenticator = 0xd72410f740ae385523110d6defecb5f0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: EAP packet type response id 2 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 1 modcall: group authenticate returns handled for request 1 Sending Access-Challenge of id 192 to 145.238.3.182:1026 EAP-Message = 0x010300061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x429c3c29e255f725c510981e01307d3e Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=193, length=313 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0x429c3c29e255f725c510981e01307d3e EAP-Message = 0x0203006115800000005716030100520100004e0301470497b869826a1a156494e801e8ab8ebc88e444edbab8d5e7b9c890b9ce7d5c00002600390038003500160013000a00330032002f0005000400150012000900140011000800060003020100 Message-Authenticator = 0x69a1421041ecda03d67273a14054310d Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_eap: EAP packet type response id 3 length 97 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0052], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0627], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: group authenticate returns handled for request 2 Sending Access-Challenge of id 193 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0xb9725040db64c2a0e82e184b66da29d00c42a99b5c588f7de357d074b21a4ce8ed578bffb5f2b962dd2bfd8c6a60a3dc064acc9fedb3fad12fb92de22b0634430dc06a630879e4ea0448079ced1bc11c003ef63cc063bcb5a511c6f6fd2b5d8b0bae89d1b04c0985a1f70203010001a317301530130603551d25040c300a06082b06010505070301300d06092a864886f70d0101040500038181009bb60795878ef9fd824caf95eda533eab41d75312f8af7420ca9045a4fed5c4999bb03caacd5f1074ba66ec9c401629f93b57709be7ab76188983f3f87b120536fdc626dbb5aed1b80e1473745421b7a867877073afc4394bae8579886ade7082f38 EAP-Message = 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 EAP-Message = 0x30110603550408130a536f6d652d5374617465310f30 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcdb56b546410d47e8ad2dc8aa7e606f8 Finished request 2 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=194, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xcdb56b546410d47e8ad2dc8aa7e606f8 EAP-Message = 0x020400061500 Message-Authenticator = 0x78acfb7b5c5d9ba93dbf5fb16b853196 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 rlm_eap: EAP packet type response id 4 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns updated for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: group authenticate returns handled for request 3 Sending Access-Challenge of id 194 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 0xec80d2fbab0203010001a381e83081e5301d0603551d0e04160414d8ca68899a3cf0402e89e9889f4f598ba2bec2513081b50603551d230481ad3081aa8014d8ca68899a3cf0402e89e9889f4f598ba2bec251a18186a48183308180310b3009060355040613024652311330110603550408130a536f6d652d5374617465310f300d060355040713064d4555444f4e31133011060355040a130a4f4253204d4555444f4e31133011060355040b130a4465706172742053494f3121301f06092a864886f70d01090116127261636861383140686f746d61696c2e667282090097d09903d21d9c52300c0603551d13040530030101ff300d06092a864886 EAP-Message = 0xf70d01010405000381810055e9fecdcd89146c84f21a7b232da59b1eee35c889d5eb07950d116f3baf9123308ea514daa6f7515e33994652f76748b981e7c5e5a00e6c5c4c03299318e812e100549970034482fef14fcaa937d71d79a6bfb4f0ce39b2bbe0f4028e1f90a2c7d1e1f6ded3df9e11af13c85fa10eaec4f6979f3010b4b5521d07e05e4a6ec916030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe701c94007f01d9882634f0432a6d114 Finished request 3 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=195, length=424 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xe701c94007f01d9882634f0432a6d114 EAP-Message = 0x020500d01580000000c61603010086100000820080507e96001f817c7dfce96e989e771b2f38902a81f66519d75d522508d6b663508f50ef374da3dfc95996083930080e5edc58248184dd494816913f65d647fde08f8b2db8a1e37422e4d9ff6dd65cbd60a5c21b5d7e66d015b9cc61e2ac46dc25de7c9f6e01be17dbbb0599d795f3aa77467f4354579881ff6240969e5e9f5a1414030100010116030100305b0059cfbe818835fc45399fb05c6c72596ce0ec8a4a0befa17575c6a10931c46c05cc777adf688c60a888f381a2e561 Message-Authenticator = 0xa55246d48162d9bc3e2842114589d25b Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 modcall[authorize]: module "chap" returns noop for request 4 rlm_eap: EAP packet type response id 5 length 208 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 4 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 4 modcall: group authorize returns updated for request 4 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 4 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 rlm_eap_tls: <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange TLS_accept: SSLv3 read client key exchange A rlm_eap_tls: <<< TLS 1.0 ChangeCipherSpec [length 0001] rlm_eap_tls: <<< TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 read finished A rlm_eap_tls: >>> TLS 1.0 ChangeCipherSpec [length 0001] TLS_accept: SSLv3 write change cipher spec A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 write finished A TLS_accept: SSLv3 flush data (other): SSL negotiation finished successfully SSL Connection Established eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 4 modcall: group authenticate returns handled for request 4 Sending Access-Challenge of id 195 to 145.238.3.182:1026 EAP-Message = 0x0106004515800000003b140301000101160301003058729f21c600df1c67c00c784ba7ecf50581a5b3657f8a24ebd96af0977e332430409dee3dfec98cb5786579ba3c9189 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x34c8b26e1d7071a34ec8210c3710baaa Finished request 4 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 191 with timestamp 47049795 Cleaning up request 1 ID 192 with timestamp 47049795 Cleaning up request 2 ID 193 with timestamp 47049795 Cleaning up request 3 ID 194 with timestamp 47049795 Cleaning up request 4 ID 195 with timestamp 47049795 Nothing to do. Sleeping until we see a request. the server no sends response, why?? and this log by Windows XP rad_recv: Access-Request packet from host 145.238.3.182:1026, id=196, length=208 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" EAP-Message = 0x021b000a017261636861 Message-Authenticator = 0x54bacc36ad1175e684554c5f76c58832 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_eap: EAP packet type response id 27 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: group authenticate returns handled for request 0 Sending Access-Challenge of id 196 to 145.238.3.182:1026 EAP-Message = 0x011c001f1a011c001a105f4f4c366e47d80b1c27e30d08b4b0367261636861 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfbee0cbaf20c360de5cb21cf55607e20 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=197, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xfbee0cbaf20c360de5cb21cf55607e20 EAP-Message = 0x021c00060315 Message-Authenticator = 0xb00f0ec480c5c36eb8a7110e87bde3b3 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: EAP packet type response id 28 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 1 modcall: group authenticate returns handled for request 1 Sending Access-Challenge of id 197 to 145.238.3.182:1026 EAP-Message = 0x011d00061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x429c3c29e255f725e935b0e1db7a8a39 Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=198, length=276 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0x429c3c29e255f725e935b0e1db7a8a39 EAP-Message = 0x021d003c158000000032160301002d010000290301e0dd816d595bd3edf0729c53c2953ffb3711cca4eb039cd0b2ac413175dfd9cd000002000a0100 Message-Authenticator = 0x842f4348b12e8e2bf0ce66965c711fc9 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_eap: EAP packet type response id 29 length 60 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 002d], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0627], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: group authenticate returns handled for request 2 Sending Access-Challenge of id 198 to 145.238.3.182:1026 EAP-Message = 0x011e040a15c000000684160301004a02000046030147049daa9066df5b206f509c2daf785a039b3f290d1da1972b195d73c56b3fee20d5f2327a11b59ff3ae5d4e9d5faaa5a1e5941852291e3c28f8403f5658ff3bd0000a0016030106270b0006230006200002ad308202a930820212a00302010202090097d09903d21d9c53300d06092a864886f70d0101040500308180310b3009060355040613024652311330110603550408130a536f6d652d5374617465310f300d060355040713064d4555444f4e31133011060355040a130a4f4253204d4555444f4e31133011060355040b130a4465706172742053494f3121301f06092a864886f70d0109 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x30110603550408130a536f6d652d5374617465310f30 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcdb56b546410d47ec20726810835dc55 Finished request 2 Going to the next request --- Walking the entire request list --- Waking up in 4 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=199, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xcdb56b546410d47ec20726810835dc55 EAP-Message = 0x021e00061500 Message-Authenticator = 0xabeaab3cbe7e553ebd43785cd5c25f86 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 rlm_eap: EAP packet type response id 30 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns updated for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: group authenticate returns handled for request 3 Sending Access-Challenge of id 199 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0xf70d01010405000381810055e9fecdcd89146c84f21a7b232da59b1eee35c889d5eb07950d116f3baf9123308ea514daa6f7515e33994652f76748b981e7c5e5a00e6c5c4c03299318e812e100549970034482fef14fcaa937d71d79a6bfb4f0ce39b2bbe0f4028e1f90a2c7d1e1f6ded3df9e11af13c85fa10eaec4f6979f3010b4b5521d07e05e4a6ec916030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe701c94007f01d98e348e2739e552ea6 Finished request 3 Going to the next request Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 196 with timestamp 47049da8 Cleaning up request 1 ID 197 with timestamp 47049da8 Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 2 ID 198 with timestamp 47049daa Cleaning up request 3 ID 199 with timestamp 47049daa Nothing to do. Sleeping until we see a request. what's a problem? Please could you help me? thanks _________________________________________________________________ Gagnez des écrans plats avec Live.com http://www.image-addict.fr/

3 6

EAP/TTLS problem with Win XP and Linux
by elhammoud rachida 04 Oct '07

04 Oct '07

hello, i'am trying to use radius authenticate and authorise users by EAP/TTLS from XP and Linux ( Debian), i'am using only a « users » like database. i'am reading the documentation : http://wiki.freeradius.org i've imported root.pem both Windows XP and Linux this log to Linux: rad_recv: Access-Request packet from host 145.238.3.182:1026, id=191, length=208 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" EAP-Message = 0x0201000a017261636861 Message-Authenticator = 0xfae743fe55bca3b8b83a48a3f10ed3bc Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_eap: EAP packet type response id 1 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: group authenticate returns handled for request 0 Sending Access-Challenge of id 191 to 145.238.3.182:1026 EAP-Message = 0x0102001f1a0102001a105f4f4c366e47d80b1c27e30d08b4b0367261636861 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfbee0cbaf20c360d6491c2b0b512304d Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=192, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xfbee0cbaf20c360d6491c2b0b512304d EAP-Message = 0x020200060315 Message-Authenticator = 0xd72410f740ae385523110d6defecb5f0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: EAP packet type response id 2 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 1 modcall: group authenticate returns handled for request 1 Sending Access-Challenge of id 192 to 145.238.3.182:1026 EAP-Message = 0x010300061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x429c3c29e255f725c510981e01307d3e Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=193, length=313 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0x429c3c29e255f725c510981e01307d3e EAP-Message = 0x0203006115800000005716030100520100004e0301470497b869826a1a156494e801e8ab8ebc88e444edbab8d5e7b9c890b9ce7d5c00002600390038003500160013000a00330032002f0005000400150012000900140011000800060003020100 Message-Authenticator = 0x69a1421041ecda03d67273a14054310d Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_eap: EAP packet type response id 3 length 97 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0052], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0627], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: group authenticate returns handled for request 2 Sending Access-Challenge of id 193 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x30110603550408130a536f6d652d5374617465310f30 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcdb56b546410d47e8ad2dc8aa7e606f8 Finished request 2 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=194, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xcdb56b546410d47e8ad2dc8aa7e606f8 EAP-Message = 0x020400061500 Message-Authenticator = 0x78acfb7b5c5d9ba93dbf5fb16b853196 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 rlm_eap: EAP packet type response id 4 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns updated for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: group authenticate returns handled for request 3 Sending Access-Challenge of id 194 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0xf70d01010405000381810055e9fecdcd89146c84f21a7b232da59b1eee35c889d5eb07950d116f3baf9123308ea514daa6f7515e33994652f76748b981e7c5e5a00e6c5c4c03299318e812e100549970034482fef14fcaa937d71d79a6bfb4f0ce39b2bbe0f4028e1f90a2c7d1e1f6ded3df9e11af13c85fa10eaec4f6979f3010b4b5521d07e05e4a6ec916030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe701c94007f01d9882634f0432a6d114 Finished request 3 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=195, length=424 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xe701c94007f01d9882634f0432a6d114 EAP-Message = 0x020500d01580000000c61603010086100000820080507e96001f817c7dfce96e989e771b2f38902a81f66519d75d522508d6b663508f50ef374da3dfc95996083930080e5edc58248184dd494816913f65d647fde08f8b2db8a1e37422e4d9ff6dd65cbd60a5c21b5d7e66d015b9cc61e2ac46dc25de7c9f6e01be17dbbb0599d795f3aa77467f4354579881ff6240969e5e9f5a1414030100010116030100305b0059cfbe818835fc45399fb05c6c72596ce0ec8a4a0befa17575c6a10931c46c05cc777adf688c60a888f381a2e561 Message-Authenticator = 0xa55246d48162d9bc3e2842114589d25b Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 modcall[authorize]: module "chap" returns noop for request 4 rlm_eap: EAP packet type response id 5 length 208 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 4 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 4 modcall: group authorize returns updated for request 4 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 4 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 rlm_eap_tls: <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange TLS_accept: SSLv3 read client key exchange A rlm_eap_tls: <<< TLS 1.0 ChangeCipherSpec [length 0001] rlm_eap_tls: <<< TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 read finished A rlm_eap_tls: >>> TLS 1.0 ChangeCipherSpec [length 0001] TLS_accept: SSLv3 write change cipher spec A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 write finished A TLS_accept: SSLv3 flush data (other): SSL negotiation finished successfully SSL Connection Established eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 4 modcall: group authenticate returns handled for request 4 Sending Access-Challenge of id 195 to 145.238.3.182:1026 EAP-Message = 0x0106004515800000003b140301000101160301003058729f21c600df1c67c00c784ba7ecf50581a5b3657f8a24ebd96af0977e332430409dee3dfec98cb5786579ba3c9189 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x34c8b26e1d7071a34ec8210c3710baaa Finished request 4 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 191 with timestamp 47049795 Cleaning up request 1 ID 192 with timestamp 47049795 Cleaning up request 2 ID 193 with timestamp 47049795 Cleaning up request 3 ID 194 with timestamp 47049795 Cleaning up request 4 ID 195 with timestamp 47049795 Nothing to do. Sleeping until we see a request. the server no sends response, why?? and this log by Windows XP rad_recv: Access-Request packet from host 145.238.3.182:1026, id=196, length=208 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" EAP-Message = 0x021b000a017261636861 Message-Authenticator = 0x54bacc36ad1175e684554c5f76c58832 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_eap: EAP packet type response id 27 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: group authenticate returns handled for request 0 Sending Access-Challenge of id 196 to 145.238.3.182:1026 EAP-Message = 0x011c001f1a011c001a105f4f4c366e47d80b1c27e30d08b4b0367261636861 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfbee0cbaf20c360de5cb21cf55607e20 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=197, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xfbee0cbaf20c360de5cb21cf55607e20 EAP-Message = 0x021c00060315 Message-Authenticator = 0xb00f0ec480c5c36eb8a7110e87bde3b3 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: EAP packet type response id 28 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 1 modcall: group authenticate returns handled for request 1 Sending Access-Challenge of id 197 to 145.238.3.182:1026 EAP-Message = 0x011d00061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x429c3c29e255f725e935b0e1db7a8a39 Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=198, length=276 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0x429c3c29e255f725e935b0e1db7a8a39 EAP-Message = 0x021d003c158000000032160301002d010000290301e0dd816d595bd3edf0729c53c2953ffb3711cca4eb039cd0b2ac413175dfd9cd000002000a0100 Message-Authenticator = 0x842f4348b12e8e2bf0ce66965c711fc9 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_eap: EAP packet type response id 29 length 60 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 002d], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0627], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: group authenticate returns handled for request 2 Sending Access-Challenge of id 198 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x30110603550408130a536f6d652d5374617465310f30 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcdb56b546410d47ec20726810835dc55 Finished request 2 Going to the next request --- Walking the entire request list --- Waking up in 4 seconds... rad_recv: Access-Request packet from host 145.238.3.182:1026, id=199, length=222 Framed-MTU = 1480 NAS-IP-Address = 145.238.3.182 NAS-Identifier = "sw-test-radius-1" User-Name = "racha" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "17" Called-Station-Id = "00-14-38-fe-12-00" Calling-Station-Id = "00-12-3f-0e-99-6f" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "301" State = 0xcdb56b546410d47ec20726810835dc55 EAP-Message = 0x021e00061500 Message-Authenticator = 0xabeaab3cbe7e553ebd43785cd5c25f86 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 modcall[authorize]: module "chap" returns noop for request 3 rlm_eap: EAP packet type response id 30 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 users: Matched entry racha at line 86 modcall[authorize]: module "files" returns ok for request 3 modcall: group authorize returns updated for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: group authenticate returns handled for request 3 Sending Access-Challenge of id 199 to 145.238.3.182:1026 EAP-Message = 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 EAP-Message = 0xec80d2fbab0203010001a381e83081e5301d0603551d0e04160414d8ca68899a3cf0402e89e9889f4f598ba2bec2513081b50603551d230481ad3081aa8014d8ca68899a3cf0402e89e9889f4f598ba2bec251a18186a48183308180310b3009060355040613024652311330110603550408130a536f6d652d5374617465310f300d060355040713064d4555444f4e31133011060355040a130a4f4253204d4555444f4e31133011060355040b130a4465706172742053494f3121301f06092a864886f70d01090116127261636861383140686f746d61696c2e667282090097d09903d21d9c52300c0603551d13040530030101ff300d06092a864886 EAP-Message = 0xf70d01010405000381810055e9fecdcd89146c84f21a7b232da59b1eee35c889d5eb07950d116f3baf9123308ea514daa6f7515e33994652f76748b981e7c5e5a00e6c5c4c03299318e812e100549970034482fef14fcaa937d71d79a6bfb4f0ce39b2bbe0f4028e1f90a2c7d1e1f6ded3df9e11af13c85fa10eaec4f6979f3010b4b5521d07e05e4a6ec916030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe701c94007f01d98e348e2739e552ea6 Finished request 3 Going to the next request Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 196 with timestamp 47049da8 Cleaning up request 1 ID 197 with timestamp 47049da8 Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 2 ID 198 with timestamp 47049daa Cleaning up request 3 ID 199 with timestamp 47049daa Nothing to do. Sleeping until we see a request. what's a problem? Please could you help me? thanks _________________________________________________________________ Windows Live Spaces : créez votre blog à votre image ! http://www.windowslive.fr/spaces

1 0

Re: in vs. out
by wlan＠mac.com 04 Oct '07

04 Oct '07

>> In RFC 2866, it says: >> >> Acct-Input-Octets = This attribute indicates how many octets have >> been received from the port over the course of this service being >> provided. > > Remember, this is from the view that users connect to a port on the > NAS. So data received "from the port" means "from the user". See > also > the Livingston Portmaster documentation: > > http://portmasters.com/tech/docs/radius/accounting.html > > They are the people who wrote the original RADIUS specification, so > they should know what it means. > It is curious, then, why the RFC isn't as definitive in the definition... I suppose it is intentionally left open for vendor interpretation. As such, portmaster being more specific as it relates to their products isn't surprising. But, is that the 'standard', a 'best practice', or just one vendor's (albeit, a very in-the-know vendor's) implementation? I do agree with the point of view (of the port), in theory. However, in practice, I guess the best answer is that it is vendor specific.. hmm. >> In the manual of a popular commercial access controller, it says: >> >> Acct-Input-Octets = Number of octets/bytes received by the customer. > > That is wrong. It is number of bytes received FROM the customer, TO > the NAS. > >> Which is a rather "outward" way of looking at the "port" referred >> to in >> RFC. I have also seen it defined in the reverse way. To be >> standard with >> commercial gear, I have taken the above definition as being the >> 'right >> way' ... other opinions? > > Follow the standards. Do not follow broken vendors. It actually isn't just that one vendor... in fact, if not mistaken, much of the commercial wlan gear I've worked with used the above meaning. It would be curious to see a list of vendors and how they implemented their accounting... if we all checked the manuals of the devices we use, we could all help build that list in the freeradius wiki! David

3 2

rlm_Python - PyExc_IOError
by Mike O'Connor 04 Oct '07

04 Oct '07

Hi Guys Got a problem with rlm_python using 1.1.7 on Debian etch with no changes to source other than to move rlm_python in to the stable modules file. The module is in the path and an strace shows the file being found. rlm_python:python_load_function: module 'radiusd_test' is not found rlm_python:EXCEPT:exceptions.ImportError: /usr/lib/python2.4/lib-dynload/time.so: undefined symbol: PyExc_IOError rlm_python:python_load_function: failed to import python function 'radiusd_test.instantiate' radiusd.conf[1]: python: Module instantiation failed. Anyidea would be great Thanks Mike ------- File is found and loaded open("/usr/lib/python2.4/site-packages/radiusd_test.py", O_RDONLY|O_LARGEFILE) = 5 fstat64(5, {st_mode=S_IFREG|0644, st_size=497, ...}) = 0 open("/usr/lib/python2.4/site-packages/radiusd_test.pyc", O_RDONLY|O_LARGEFILE) = 6 fstat64(6, {st_mode=S_IFREG|0644, st_size=1408, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7b67000 read(6, "m\362\r\n<\365\1Gc\0\0\0\0\0\0\0\0\1\0\0\0@\0\0\0s[\0\0"..., 4096) = 1408 fstat64(6, {st_mode=S_IFREG|0644, st_size=1408, ...}) = 0 read(6, "", 4096) = 0 close(6) = 0 munmap(0xb7b67000, 4096) ------ = 0 stat64("/usr/lib/python24.zip/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python24.zip/time.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python24.zip/timemodule.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python24.zip/time.py", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python24.zip/time.pyc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) stat64("/usr/lib/python2.4/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/time.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/timemodule.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/time.py", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/time.pyc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) stat64("/usr/lib/python2.4/plat-linux2/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/plat-linux2/time.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/plat-linux2/timemodule.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/plat-linux2/time.py", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/plat-linux2/time.pyc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) stat64("/usr/lib/python2.4/lib-tk/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-tk/time.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-tk/timemodule.so", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-tk/time.py", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-tk/time.pyc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) stat64("/usr/lib/python2.4/lib-dynload/time", 0xbfa8422c) = -1 ENOENT (No such file or directory) open("/usr/lib/python2.4/lib-dynload/time.so", O_RDONLY|O_LARGEFILE) = 6 fstat64(6, {st_mode=S_IFREG|0644, st_size=15860, ...}) = 0 open("/usr/lib/python2.4/lib-dynload/time.so", O_RDONLY) = 7 read(7, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\22\0"..., 512) = 512 fstat64(7, {st_mode=S_IFREG|0644, st_size=15860, ...}) = 0 mmap2(NULL, 19072, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0xb79a6000 mmap2(0xb79a9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0x2) = 0xb79a9000 close(7) = 0 munmap(0xb79a6000, 19072) = 0 close(6) = 0 close(5) = 0 futex(0x8010a620, FUTEX_WAKE, 1) = 0 time(NULL) = 1191313703 write(1, "rlm_python:python_load_function:"..., 68rlm_python:python_load_function: module 'radiusd_test' is not found ) = 68 futex(0x801083f8, FUTEX_WAKE, 1) = 0 time(NULL) = 1191313703 write(1, "rlm_python:EXCEPT:exceptions.Imp"..., 114rlm_python:EXCEPT:exceptions.ImportError: /usr/lib/python2.4/lib-dynload/time.so: undefined symbol: PyExc_IOError ) = 114 futex(0x801083f8, FUTEX_WAKE, 1) = 0 time(NULL) = 1191313703 write(1, "rlm_python:python_load_function:"..., 93rlm_python:python_load_function: failed to import python function 'radiusd_test.instantiate' ) = 93 futex(0x801083f8, FUTEX_WAKE, 1) = 0 futex(0x801083f8, FUTEX_WAKE, 1) = 0 futex(0x801083f8, FUTEX_WAKE, 1) = 0 time(NULL) = 1191313703 write(1, "radiusd.conf[1]: python: Module "..., 55radiusd.conf[1]: python: Module instantiation failed. ) = 55 munmap(0xb7f81000, 4096) = 0 exit_group(1) = ? Process 23416 detached

3 8

in vs. out
by wlan＠mac.com 03 Oct '07

03 Oct '07

Hello, I'm wondering if anyone has an opinion of the right meaning for input vs. output with respect to acct-in/output-octets/packets? In RFC 2866, it says: Acct-Input-Octets = This attribute indicates how many octets have been received from the port over the course of this service being provided. In the manual of a popular commercial access controller, it says: Acct-Input-Octets = Number of octets/bytes received by the customer. Which is a rather "outward" way of looking at the "port" referred to in RFC. I have also seen it defined in the reverse way. To be standard with commercial gear, I have taken the above definition as being the 'right way' ... other opinions? David

2 1

Supplicant seems not to send password user
by Ivan Kalik 03 Oct '07

03 Oct '07

OK. Had some time to look at your certificates. You have created a server certificate but not the (signed) root one. Instead you used and exported cacert. Also your server cert and private keys are separate while in your tls config you configured them as a same file. Have a look at CA.all script that comes with the freeradius distribution (or better use it) to see how it should be done. It places the key in the same file as the certificate. Ivan Kalik Kalik Informatika ISP

4 8

Conditional Proxy Radius
by Abdul Qadir 03 Oct '07

03 Oct '07

HI, I am using freeradius with SER. In simple words i want to proxy radius based on user id instead of realm. Also want to add some extra functionality before I do the proxy. My requirements are as follows I have two different types of users. Some users have numeric user id and some have Alphanumeric. E.g 123456(a)mydomain.com and abdefghijk(a)mydomain.com I would like to configure my radius server as 1. If user id is numeric. i.e 123456(a)mydomain.com Query local database for authentication. 2. If user id is alphanumeric i.e abdefghijk(a)mydomain.com 2.1 First Query local database to get new realm value for this user id. eg. database query will return me abdefghijk(a)RemoteDomain.com 2.3 Proxy the new URI to another radius. Please suggest whether its possible to do so, if yes what is the procedure. And which version of FreeRadius support this kind of functionality. Thanking you in advance. Best Regards, Abdul Qadir --------------------------------- Catch up on fall's hot new shows on Yahoo! TV. Watch previews, get listings, and more!

2 1