- Freeradius-Users - lists.freeradius.org

Re: User Authorization Using 'PAM Authentication Module(pam_radius_auth.so)
by Deepak Kumar Bhagat 07 Dec '18

07 Dec '18

Thank You !! Alan for the response, It's very encouraging for me. > If you can update the patch for the current module, I can add it in. I have completed the patch and doing the initial testing with my setup, I will surely share the patch very soon !!

1 0

Implementation with AD integration on RHEL7
by M S 06 Dec '18

06 Dec '18

Hi all, Please pardon my newb-ness. I am new to RADIUS and FreeRADIUS. How would you guys advise setting up FreeRADIUS to utilize Active Directory on RHEL7? My goal is to provide centralized authentication for our network switches. The RHEL7 host system that will be hosting FreeRADIUS is setup to directly authenticate users logging into it against our AD server using sssd. I was thinking that rather than setting up a separate AD relationship between FreeRADIUS and AD, would it be possible to have FreeRADIUS utilize the OS-level relationship that is setup with AD via sssd? I am not finding much online describing this setup. Setup: Red Hat Enterprise Linux Server release 7.6 (Maipo) FreeRADIUS 3.0.13-9 (the version available in RHEL7 repos) Thanks, MS

3 2

sqlippool additional information
by Nathan Ward 06 Dec '18

06 Dec '18

Hi, I’m doing some testing of sqlippool in a fairly large scale environment, where we have lots of different IPv4 prefixes to select addresses from. We have many prefixes in each pool, and direct customers to pools based on some details. Depending on the prefix the customer gets assigned an address from we want to return different information in RADIUS - such as setting attributes to pass DHCP options like prefix length, router, DNS server, etc. In my testing, I’ve been setting these manually, but in production these can change, and I don’t want to be reconfiguring and reloading the RADIUS server each time we move things about. Customers could get addresses from any prefix, so we can’t provide these values from our user database unfortunately. sqlippool returns only a single value. As does sql xlat. Is there a good way to pull these from a DB? We’ve got both LDAP and SQL at our disposal. We’re running Postgres, so can easily do a longest prefix match to find the prefix that an address is in - but this means one query per attribute value we want, which I figure means about 4 or 5 extra queries per auth request so isn’t really ideal. Before I go down that road, I figured I’d reach out and see if anyone else has an elegant solution I haven’t considered, as it seems like it’d be a fairly common problem. -- Nathan Ward

3 4

User Authorization Using 'PAM Authentication Module(pam_radius_auth.so)
by Deepak Kumar Bhagat 06 Dec '18

06 Dec '18

Hi All, I have a requirement to authenticate and authorize users for management access to the device using Radius Protocol. I'm using Linux PAM module (pam_radius_auth.so) for Radius client support and freeRADIUS as Radius server. I have written sample PAM-enable application (check_user) to test the same. I could successfully test user authentication using my application. As part of user authorization, I'm sending 'Management-Privilege-Level (136)' RFC 5607 attribute in 'Access-Accept' and Intend to use the same at the device to give different management access to the user. Different Management-Privilege-Level (MPL) levels are mapped as below. MPL Access Level 1 Root user (read, write, exec) 2 Read only user (read) 3 Deny access (null) Is there a way to fetch/read/pass this attribute from pam_radius_auth.so to my PAM-enable application?? I checked pam_radius_auth.so source code, It seems it doesn't read any attribute from 'Access Accept' received from the server, if that is the case then how can we enable 'PAM Authentication Module' to read the authorization attributes received in the response?? Or, Can someone suggest how can we achieve user authorization using PAM Authentication module?? One relevant reference form the mail list is https://www.redhat.com/archives/pam-list/2001-March/msg00056.html, but it seems the code changes are not included in the module. Many Thanks, Deepak Bhagat.

2 1

Re: escaping close brace inside "d string is not working
by Chinnapaiyan, Nagamani 06 Dec '18

06 Dec '18

It works when we escape with %. Documentation should have had this point. if("%{redis: EXISTS {local%}:pool}" == 1) { Regards, Nagamani Chinnapaiyan

2 1

Fw: How to Enable Accounting Update using Freeradius-Client
by Hamid Hashmi 06 Dec '18

06 Dec '18

Hi I am using Freeradius-Client<https://github.com/FreeRADIUS/freeradius-client> with opensips (aaa_radius<https://opensips.org/html/docs/modules/2.4.x/aaa_radius.html>) and I need to enable accounting update, how can I do that? I have added AVP Acct-Interim-Update<https://freeradius.org/rfc/rfc2869.html#Acct-Interim-Interval> in an Access-Accept packet but still freeradius-client in not generating accounting update. Is there any other configuration or AVP required in freeradius-client to enable interim updates. Regards Hamid R. Hashmi

2 1

Re: Hex to Cleartext
by Chinnapaiyan, Nagamani 06 Dec '18

06 Dec '18

Thanks Arran... It works fine... I could not find this(bin) in the man page... >It's a bit annoying needing to jump through these hoops though. I'm guessing you're inserting the hexits into redis instead of the binary string? The xlat is binary safe so you shouldn't need to do that... Yes. redis db has hex digit string ... Regards, Nagamani Chinnapaiyan

3 2

Help configuring FreeRADIUS on OS X Server - ERROR: (2) mschap: ERROR: (null): status = eServerError
by Eric Wittle 06 Dec '18

06 Dec '18

I’m working to migrate off of the built-in FreeRADIUS server that is being removed from OS X Server. I have a working configuration using the built-in version. However, after following the instructions that are part of the OS X Server migration guide (https://developer.apple.com/support/macos-server/macOS-Server-Service-Migra…, pages 12-16), authentication fails. I see an error: “Sun Dec 2 21:18:34 2018 : ERROR: (2) mschap: ERROR: (null): status = eServerError” in the radius.log file. Following the instructions on the user list, I captured the attached debug file. Any help would be appreciated, because I’m a bit lost. Thanks in advance. -Eric

5 22

escaping close brace inside "d string is not working
by Chinnapaiyan, Nagamani 06 Dec '18

06 Dec '18

Hi, I am trying to send a command to redis db from dhcp server. That command has pool name “{local}:pool” as argument. Here I need to escape the close brace like below, if("%{redis: EXISTS {local\}:pool}" == 1) { This one should send EXISTS command to redis db with argument “{local}:pool”. But it is sending “{local\}:pool”. If I remove the \} escaping like below, if("%{redis: EXISTS {local}:pool}" == 1) { this sends only “{local” as argument. Debug output(for \}): Thu Dec 6 04:26:23 2018 : Info : FreeRADIUS Version 4.0.0 Thu Dec 6 04:26:23 2018 : Info : Copyright 1999-2018 The FreeRADIUS server project and contributors Thu Dec 6 04:26:23 2018 : Info : There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Thu Dec 6 04:26:23 2018 : Info : PARTICULAR PURPOSE Thu Dec 6 04:26:23 2018 : Info : You may redistribute copies of FreeRADIUS under the terms of the Thu Dec 6 04:26:23 2018 : Info : GNU General Public License Thu Dec 6 04:26:23 2018 : Info : For more information about these matters, see the file named COPYRIGHT Thu Dec 6 04:26:23 2018 : Info : Starting - reading configuration files ... Thu Dec 6 04:26:23 2018 : Debug : Including dictionary file "/usr/local/share/freeradius/dictionary" Thu Dec 6 04:26:23 2018 : Debug : Including dictionary file "/usr/local/etc/raddb/dictionary" Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/radiusd.conf Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/clients.conf Thu Dec 6 04:26:23 2018 : Debug : Including files in directory "/usr/local/etc/raddb/mods-enabled/" Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/always Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/attr_filter Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/cache_eap Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/chap Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/client Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/detail Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/detail.log Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/digest Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/dhcpv4 Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/eap_inner Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/echo Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/escape Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/exec Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/expiration Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/expr Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/files Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/linelog Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/logintime Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/mschap Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/ntlm_auth Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/pam Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/pap Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/passwd Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/radius Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/radutmp Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/soh Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/sradutmp Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/stats Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/unix Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/unpack Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/utf8 Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/mac2ip Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/redis_ippool Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/redis Thu Dec 6 04:26:23 2018 : Debug : Including files in directory "/usr/local/etc/raddb/policy.d/" Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/abfab-tr Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/accounting Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/canonicalization Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/control Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/cui Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/debug Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/dhcp Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/eap Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/filter Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/operator-name Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/time Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/vendor Thu Dec 6 04:26:23 2018 : Debug : Including files in directory "/usr/local/etc/raddb/sites-enabled/" Thu Dec 6 04:26:23 2018 : Debug : including configuration file /usr/local/etc/raddb/sites-enabled/dhcp Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary proto_dhcpv4 Thu Dec 6 04:26:23 2018 : Info : Loaded module "proto_dhcpv4" Thu Dec 6 04:26:23 2018 : Debug : Parsing security rules to bootstrap UID / GID / chroot / etc. Thu Dec 6 04:26:23 2018 : Debug : main { Thu Dec 6 04:26:23 2018 : Debug : security { Thu Dec 6 04:26:23 2018 : Debug : allow_core_dumps = no Thu Dec 6 04:26:23 2018 : Debug : allow_vulnerable_openssl = "no" Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : name = radiusd Thu Dec 6 04:26:23 2018 : Debug : name = "radiusd" Thu Dec 6 04:26:23 2018 : Debug : prefix = "/usr/local" Thu Dec 6 04:26:23 2018 : Debug : local_state_dir = "/usr/local/var" Thu Dec 6 04:26:23 2018 : Debug : run_dir = "/usr/local/var/run/radiusd" Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Parsing main configuration. Thu Dec 6 04:26:23 2018 : Debug : main { Thu Dec 6 04:26:23 2018 : Debug : server dhcp { Thu Dec 6 04:26:23 2018 : Debug : namespace = "dhcpv4" Thu Dec 6 04:26:23 2018 : Debug : listen { Thu Dec 6 04:26:23 2018 : Debug : type = DHCP-Discover Thu Dec 6 04:26:23 2018 : Info : Loaded module "proto_dhcpv4_base" Thu Dec 6 04:26:23 2018 : Debug : type = DHCP-Request Thu Dec 6 04:26:23 2018 : Debug : type = DHCP-Inform Thu Dec 6 04:26:23 2018 : Debug : type = DHCP-Release Thu Dec 6 04:26:23 2018 : Debug : type = DHCP-Decline Thu Dec 6 04:26:23 2018 : Debug : transport = udp Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary proto_dhcpv4_udp Thu Dec 6 04:26:23 2018 : Info : Loaded module "proto_dhcpv4_udp" Thu Dec 6 04:26:23 2018 : Debug : udp { Thu Dec 6 04:26:23 2018 : Debug : ipaddr = 10.43.18.92 Thu Dec 6 04:26:23 2018 : Debug : port = 67 Thu Dec 6 04:26:23 2018 : Debug : broadcast = no Thu Dec 6 04:26:23 2018 : Debug : networks { Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : max_packet_size = 4096 Thu Dec 6 04:26:23 2018 : Debug : max_attributes = 0 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : limit { Thu Dec 6 04:26:23 2018 : Debug : idle_timeout = 30.000000 Thu Dec 6 04:26:23 2018 : Debug : nak_lifetime = 30.000000 Thu Dec 6 04:26:23 2018 : Debug : max_connections = 1024 Thu Dec 6 04:26:23 2018 : Debug : max_clients = 256 Thu Dec 6 04:26:23 2018 : Debug : max_pending_packets = 256 Thu Dec 6 04:26:23 2018 : Debug : priority { Thu Dec 6 04:26:23 2018 : Debug : DHCP-Discover = normal Thu Dec 6 04:26:23 2018 : Debug : DHCP-Request = normal Thu Dec 6 04:26:23 2018 : Debug : DHCP-Decline = normal Thu Dec 6 04:26:23 2018 : Debug : DHCP-Release = normal Thu Dec 6 04:26:23 2018 : Debug : DHCP-Inform = normal Thu Dec 6 04:26:23 2018 : Debug : DHCP-Lease-Query = low Thu Dec 6 04:26:23 2018 : Debug : DHCP-Bulk-Lease-Query = low Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : security { Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : sbin_dir = "/usr/local/sbin" Thu Dec 6 04:26:23 2018 : Debug : logdir = "/usr/local/var/log/radius" Thu Dec 6 04:26:23 2018 : Debug : libdir = "/usr/local/lib" Thu Dec 6 04:26:23 2018 : Debug : radacctdir = "/usr/local/var/log/radius/radacct" Thu Dec 6 04:26:23 2018 : Debug : reverse_lookups = no Thu Dec 6 04:26:23 2018 : Debug : reverse_lookups = no Thu Dec 6 04:26:23 2018 : Debug : hostname_lookups = yes Thu Dec 6 04:26:23 2018 : Debug : hostname_lookups = yes Thu Dec 6 04:26:23 2018 : Debug : max_request_time = 30 Thu Dec 6 04:26:23 2018 : Debug : max_request_time = 30 Thu Dec 6 04:26:23 2018 : Debug : pidfile = "/usr/local/var/run/radiusd/radiusd.pid" Thu Dec 6 04:26:23 2018 : Debug : debug_level = 0 Thu Dec 6 04:26:23 2018 : Debug : log { Thu Dec 6 04:26:23 2018 : Debug : colourise = yes Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : resources { Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : thread pool { Thu Dec 6 04:26:23 2018 : Debug : num_networks = 1 Thu Dec 6 04:26:23 2018 : Debug : num_networks = 1 Thu Dec 6 04:26:23 2018 : Debug : num_workers = 4 Thu Dec 6 04:26:23 2018 : Debug : num_workers = 4 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Info : Switching to configured log settings Thu Dec 6 04:26:23 2018 : Debug : radiusd: #### Loading Clients #### Thu Dec 6 04:26:23 2018 : Debug : client localhost { Thu Dec 6 04:26:23 2018 : Debug : ipaddr = 127.0.0.1 Thu Dec 6 04:26:23 2018 : Debug : require_message_authenticator = no Thu Dec 6 04:26:23 2018 : Debug : secret = <<< secret >>> Thu Dec 6 04:26:23 2018 : Debug : proto = "*" Thu Dec 6 04:26:23 2018 : Debug : limit { Thu Dec 6 04:26:23 2018 : Debug : max_connections = 16 Thu Dec 6 04:26:23 2018 : Debug : lifetime = 0 Thu Dec 6 04:26:23 2018 : Debug : idle_timeout = 30 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : client localhost_ipv6 { Thu Dec 6 04:26:23 2018 : Debug : ipv6addr = ::1 Thu Dec 6 04:26:23 2018 : Debug : require_message_authenticator = no Thu Dec 6 04:26:23 2018 : Debug : secret = <<< secret >>> Thu Dec 6 04:26:23 2018 : Debug : limit { Thu Dec 6 04:26:23 2018 : Debug : max_connections = 16 Thu Dec 6 04:26:23 2018 : Debug : lifetime = 0 Thu Dec 6 04:26:23 2018 : Debug : idle_timeout = 30 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : client private-network-1 { Thu Dec 6 04:26:23 2018 : Debug : ipaddr = 10.43.18.0/24 Thu Dec 6 04:26:23 2018 : Debug : require_message_authenticator = no Thu Dec 6 04:26:23 2018 : Debug : secret = <<< secret >>> Thu Dec 6 04:26:23 2018 : Debug : limit { Thu Dec 6 04:26:23 2018 : Debug : max_connections = 16 Thu Dec 6 04:26:23 2018 : Debug : lifetime = 0 Thu Dec 6 04:26:23 2018 : Debug : idle_timeout = 30 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Info : Debugger not attached Thu Dec 6 04:26:23 2018 : Debug : #### Bootstrapping listeners #### Thu Dec 6 04:26:23 2018 : Debug : #### Bootstrapping modules #### Thu Dec 6 04:26:23 2018 : Debug : modules { Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_always" Thu Dec 6 04:26:23 2018 : Debug : always reject { Thu Dec 6 04:26:23 2018 : Debug : rcode = "reject" Thu Dec 6 04:26:23 2018 : Debug : simulcount = 0 Thu Dec 6 04:26:23 2018 : Debug : mpp = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : always fail { Thu Dec 6 04:26:23 2018 : Debug : rcode = "fail" Thu Dec 6 04:26:23 2018 : Debug : simulcount = 0 Thu Dec 6 04:26:23 2018 : Debug : mpp = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : always ok { Thu Dec 6 04:26:23 2018 : Debug : rcode = "ok" Thu Dec 6 04:26:23 2018 : Debug : simulcount = 0 Thu Dec 6 04:26:23 2018 : Debug : mpp = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : always handled { Thu Dec 6 04:26:23 2018 : Debug : rcode = "handled" Thu Dec 6 04:26:23 2018 : Debug : simulcount = 0 Thu Dec 6 04:26:23 2018 : Debug : mpp = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : always invalid { Thu Dec 6 04:26:23 2018 : Debug : rcode = "invalid" Thu Dec 6 04:26:23 2018 : Debug : simulcount = 0 Thu Dec 6 04:26:23 2018 : Debug : mpp = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : always userlock { Thu Dec 6 04:26:23 2018 : Debug : rcode = "userlock" Thu Dec 6 04:26:23 2018 : Debug : simulcount = 0 Thu Dec 6 04:26:23 2018 : Debug : mpp = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : always notfound { Thu Dec 6 04:26:23 2018 : Debug : rcode = "notfound" Thu Dec 6 04:26:23 2018 : Debug : simulcount = 0 Thu Dec 6 04:26:23 2018 : Debug : mpp = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : always noop { Thu Dec 6 04:26:23 2018 : Debug : rcode = "noop" Thu Dec 6 04:26:23 2018 : Debug : simulcount = 0 Thu Dec 6 04:26:23 2018 : Debug : mpp = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : always updated { Thu Dec 6 04:26:23 2018 : Debug : rcode = "updated" Thu Dec 6 04:26:23 2018 : Debug : simulcount = 0 Thu Dec 6 04:26:23 2018 : Debug : mpp = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_attr_filter Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_attr_filter" Thu Dec 6 04:26:23 2018 : Debug : attr_filter attr_filter.pre-proxy { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/pre-proxy" Thu Dec 6 04:26:23 2018 : Debug : relaxed = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : attr_filter attr_filter.post-proxy { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/post-proxy" Thu Dec 6 04:26:23 2018 : Debug : relaxed = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : attr_filter attr_filter.access_reject { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_reject" Thu Dec 6 04:26:23 2018 : Debug : relaxed = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : attr_filter attr_filter.access_challenge { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_challenge" Thu Dec 6 04:26:23 2018 : Debug : relaxed = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : attr_filter attr_filter.accounting_response { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/accounting_response" Thu Dec 6 04:26:23 2018 : Debug : relaxed = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_cache Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_cache" Thu Dec 6 04:26:23 2018 : Debug : cache cache_eap { Thu Dec 6 04:26:23 2018 : Debug : driver = "rlm_cache_rbtree" Thu Dec 6 04:26:23 2018 : Debug : ttl = 15 Thu Dec 6 04:26:23 2018 : Debug : max_entries = 0 Thu Dec 6 04:26:23 2018 : Debug : epoch = 0 Thu Dec 6 04:26:23 2018 : Debug : add_stats = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_chap Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_chap" Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_client" Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_detail Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_detail" Thu Dec 6 04:26:23 2018 : Debug : detail { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/detail-%Y-%m-%d" Thu Dec 6 04:26:23 2018 : Debug : header = "%t" Thu Dec 6 04:26:23 2018 : Debug : permissions = 384 Thu Dec 6 04:26:23 2018 : Debug : locking = no Thu Dec 6 04:26:23 2018 : Debug : escape_filenames = no Thu Dec 6 04:26:23 2018 : Debug : log_packet_header = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : detail auth_log { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/auth-detail-%Y-%m-%d" Thu Dec 6 04:26:23 2018 : Debug : header = "%t" Thu Dec 6 04:26:23 2018 : Debug : permissions = 384 Thu Dec 6 04:26:23 2018 : Debug : locking = no Thu Dec 6 04:26:23 2018 : Debug : escape_filenames = no Thu Dec 6 04:26:23 2018 : Debug : log_packet_header = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : detail reply_log { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/reply-detail-%Y-%m-%d" Thu Dec 6 04:26:23 2018 : Debug : header = "%t" Thu Dec 6 04:26:23 2018 : Debug : permissions = 384 Thu Dec 6 04:26:23 2018 : Debug : locking = no Thu Dec 6 04:26:23 2018 : Debug : escape_filenames = no Thu Dec 6 04:26:23 2018 : Debug : log_packet_header = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : detail pre_proxy_log { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/pre-proxy-detail-%Y-%m-%d" Thu Dec 6 04:26:23 2018 : Debug : header = "%t" Thu Dec 6 04:26:23 2018 : Debug : permissions = 384 Thu Dec 6 04:26:23 2018 : Debug : locking = no Thu Dec 6 04:26:23 2018 : Debug : escape_filenames = no Thu Dec 6 04:26:23 2018 : Debug : log_packet_header = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : detail post_proxy_log { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/post-proxy-detail-%Y-%m-%d" Thu Dec 6 04:26:23 2018 : Debug : header = "%t" Thu Dec 6 04:26:23 2018 : Debug : permissions = 384 Thu Dec 6 04:26:23 2018 : Debug : locking = no Thu Dec 6 04:26:23 2018 : Debug : escape_filenames = no Thu Dec 6 04:26:23 2018 : Debug : log_packet_header = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_digest Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_digest" Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_dhcpv4" Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_eap Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_eap" Thu Dec 6 04:26:23 2018 : Debug : eap inner-eap { Thu Dec 6 04:26:23 2018 : Debug : default_eap_type = mschapv2 Thu Dec 6 04:26:23 2018 : Debug : type = md5 Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_eap_md5 Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_eap_md5" Thu Dec 6 04:26:23 2018 : Debug : type = gtc Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_eap_gtc Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_eap_gtc" Thu Dec 6 04:26:23 2018 : Debug : gtc { Thu Dec 6 04:26:23 2018 : Debug : challenge = "Password: " Thu Dec 6 04:26:23 2018 : Debug : auth_type = PAP Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : type = mschapv2 Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_eap_mschapv2 Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_eap_mschapv2" Thu Dec 6 04:26:23 2018 : Debug : mschapv2 { Thu Dec 6 04:26:23 2018 : Debug : with_ntdomain_hack = no Thu Dec 6 04:26:23 2018 : Debug : auth_type = mschap Thu Dec 6 04:26:23 2018 : Debug : send_error = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : type = tls Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_eap_tls Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_eap_tls" Thu Dec 6 04:26:23 2018 : Debug : tls { Thu Dec 6 04:26:23 2018 : Debug : tls = "tls-peer" Thu Dec 6 04:26:23 2018 : Debug : require_client_cert = yes Thu Dec 6 04:26:23 2018 : Debug : include_length = yes Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : ignore_unknown_eap_types = no Thu Dec 6 04:26:23 2018 : Debug : cisco_accounting_username_bug = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_exec" Thu Dec 6 04:26:23 2018 : Debug : exec echo { Thu Dec 6 04:26:23 2018 : Debug : wait = yes Thu Dec 6 04:26:23 2018 : Debug : program = "/bin/echo %{User-Name}" Thu Dec 6 04:26:23 2018 : Debug : input_pairs = "request" Thu Dec 6 04:26:23 2018 : Debug : output_pairs = "reply" Thu Dec 6 04:26:23 2018 : Debug : shell_escape = yes Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_escape" Thu Dec 6 04:26:23 2018 : Debug : escape { Thu Dec 6 04:26:23 2018 : Debug : safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.- _: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : exec { Thu Dec 6 04:26:23 2018 : Debug : wait = no Thu Dec 6 04:26:23 2018 : Debug : input_pairs = "request" Thu Dec 6 04:26:23 2018 : Debug : shell_escape = yes Thu Dec 6 04:26:23 2018 : Debug : timeout = 10 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_expiration Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_expiration" Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_expr" Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_files Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_files" Thu Dec 6 04:26:23 2018 : Debug : files { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/files/authorize" Thu Dec 6 04:26:23 2018 : Debug : acctusersfile = "/usr/local/etc/raddb/mods-config/files/accounting" Thu Dec 6 04:26:23 2018 : Debug : preproxy_usersfile = "/usr/local/etc/raddb/mods-config/files/pre-proxy" Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_linelog" Thu Dec 6 04:26:23 2018 : Debug : linelog { Thu Dec 6 04:26:23 2018 : Debug : destination = "file" Thu Dec 6 04:26:23 2018 : Debug : delimiter = " " Thu Dec 6 04:26:23 2018 : Debug : file { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/var/log/radius/linelog" Thu Dec 6 04:26:23 2018 : Debug : permissions = 384 Thu Dec 6 04:26:23 2018 : Debug : escape_filenames = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : syslog { Thu Dec 6 04:26:23 2018 : Debug : severity = "info" Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : unix { Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : tcp { Thu Dec 6 04:26:23 2018 : Debug : port = 514 Thu Dec 6 04:26:23 2018 : Debug : timeout = 2.000000 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : udp { Thu Dec 6 04:26:23 2018 : Debug : port = 514 Thu Dec 6 04:26:23 2018 : Debug : timeout = 2.000000 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : linelog log_accounting { Thu Dec 6 04:26:23 2018 : Debug : destination = "file" Thu Dec 6 04:26:23 2018 : Debug : delimiter = " " Thu Dec 6 04:26:23 2018 : Debug : file { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/var/log/radius/linelog-accounting" Thu Dec 6 04:26:23 2018 : Debug : permissions = 384 Thu Dec 6 04:26:23 2018 : Debug : escape_filenames = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : syslog { Thu Dec 6 04:26:23 2018 : Debug : severity = "info" Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : unix { Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : tcp { Thu Dec 6 04:26:23 2018 : Debug : timeout = 1000.000000 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : udp { Thu Dec 6 04:26:23 2018 : Debug : timeout = 1000.000000 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_logintime Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_logintime" Thu Dec 6 04:26:23 2018 : Debug : logintime { Thu Dec 6 04:26:23 2018 : Debug : minimum_timeout = 60 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_mschap" Thu Dec 6 04:26:23 2018 : Debug : mschap { Thu Dec 6 04:26:23 2018 : Debug : use_mppe = yes Thu Dec 6 04:26:23 2018 : Debug : require_encryption = no Thu Dec 6 04:26:23 2018 : Debug : require_strong = no Thu Dec 6 04:26:23 2018 : Debug : with_ntdomain_hack = yes Thu Dec 6 04:26:23 2018 : Debug : passchange { Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : allow_retry = yes Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : exec ntlm_auth { Thu Dec 6 04:26:23 2018 : Debug : wait = yes Thu Dec 6 04:26:23 2018 : Debug : program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap :User-Name} --password=%{User-Password}" Thu Dec 6 04:26:23 2018 : Debug : shell_escape = yes Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_pam Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_pam" Thu Dec 6 04:26:23 2018 : Debug : pam { Thu Dec 6 04:26:23 2018 : Debug : pam_auth = "radiusd" Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_pap Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_pap" Thu Dec 6 04:26:23 2018 : Debug : pap { Thu Dec 6 04:26:23 2018 : Debug : normalise = yes Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_passwd Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_passwd" Thu Dec 6 04:26:23 2018 : Debug : passwd etc_passwd { Thu Dec 6 04:26:23 2018 : Debug : filename = "/etc/passwd" Thu Dec 6 04:26:23 2018 : Debug : format = "*User-Name:Crypt-Password:" Thu Dec 6 04:26:23 2018 : Debug : delimiter = ":" Thu Dec 6 04:26:23 2018 : Debug : ignore_nislike = no Thu Dec 6 04:26:23 2018 : Debug : ignore_empty = yes Thu Dec 6 04:26:23 2018 : Debug : allow_multiple_keys = no Thu Dec 6 04:26:23 2018 : Debug : hash_size = 100 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_radius Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_radius" Thu Dec 6 04:26:23 2018 : Debug : radius { Thu Dec 6 04:26:23 2018 : Debug : transport = udp Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_radius_udp Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_radius_udp" Thu Dec 6 04:26:23 2018 : Debug : udp { Thu Dec 6 04:26:23 2018 : Debug : ipaddr = 127.0.0.1 Thu Dec 6 04:26:23 2018 : Debug : port = 1812 Thu Dec 6 04:26:23 2018 : Debug : secret = "testing123" Thu Dec 6 04:26:23 2018 : Debug : max_packet_size = 4096 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : type = Access-Request Thu Dec 6 04:26:23 2018 : Debug : type = Accounting-Request Thu Dec 6 04:26:23 2018 : Debug : status_checks { Thu Dec 6 04:26:23 2018 : Debug : type = Status-Server Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : max_connections = 32 Thu Dec 6 04:26:23 2018 : Debug : max_attributes = 255 Thu Dec 6 04:26:23 2018 : Debug : connection { Thu Dec 6 04:26:23 2018 : Debug : connect_timeout = 5.000000 Thu Dec 6 04:26:23 2018 : Debug : reconnect_delay = 5.000000 Thu Dec 6 04:26:23 2018 : Debug : idle_timeout = 5.000000 Thu Dec 6 04:26:23 2018 : Debug : zombie_period = 10.000000 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Access-Request { Thu Dec 6 04:26:23 2018 : Debug : initial_retransmission_time = 2 Thu Dec 6 04:26:23 2018 : Debug : maximum_retransmission_time = 16 Thu Dec 6 04:26:23 2018 : Debug : maximum_retransmission_count = 2 Thu Dec 6 04:26:23 2018 : Debug : maximum_retransmission_duration = 30 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Accounting-Request { Thu Dec 6 04:26:23 2018 : Debug : initial_retransmission_time = 2 Thu Dec 6 04:26:23 2018 : Debug : maximum_retransmission_time = 16 Thu Dec 6 04:26:23 2018 : Debug : maximum_retransmission_count = 5 Thu Dec 6 04:26:23 2018 : Debug : maximum_retransmission_duration = 30 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Status-Server { Thu Dec 6 04:26:23 2018 : Debug : initial_retransmission_time = 2 Thu Dec 6 04:26:23 2018 : Debug : maximum_retransmission_time = 16 Thu Dec 6 04:26:23 2018 : Debug : maximum_retransmission_count = 5 Thu Dec 6 04:26:23 2018 : Debug : maximum_retransmission_duration = 30 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_radutmp Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_radutmp" Thu Dec 6 04:26:23 2018 : Debug : radutmp { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/var/log/radius/radutmp" Thu Dec 6 04:26:23 2018 : Debug : username = "%{User-Name}" Thu Dec 6 04:26:23 2018 : Debug : case_sensitive = yes Thu Dec 6 04:26:23 2018 : Debug : check_with_nas = yes Thu Dec 6 04:26:23 2018 : Debug : permissions = 384 Thu Dec 6 04:26:23 2018 : Debug : caller_id = yes Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_soh Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_soh" Thu Dec 6 04:26:23 2018 : Debug : soh { Thu Dec 6 04:26:23 2018 : Debug : dhcp = yes Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : radutmp sradutmp { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/var/log/radius/sradutmp" Thu Dec 6 04:26:23 2018 : Debug : username = "%{User-Name}" Thu Dec 6 04:26:23 2018 : Debug : case_sensitive = yes Thu Dec 6 04:26:23 2018 : Debug : check_with_nas = yes Thu Dec 6 04:26:23 2018 : Debug : permissions = 420 Thu Dec 6 04:26:23 2018 : Debug : caller_id = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_stats Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_stats" Thu Dec 6 04:26:23 2018 : Debug : stats { Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_unix Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_unix" Thu Dec 6 04:26:23 2018 : Debug : unix { Thu Dec 6 04:26:23 2018 : Debug : radwtmp = "/usr/local/var/log/radius/radwtmp" Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Creating attribute Unix-Group Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_unpack Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_unpack" Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_utf8" Thu Dec 6 04:26:23 2018 : Debug : passwd mac2ip { Thu Dec 6 04:26:23 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/passwd/mac2ip" Thu Dec 6 04:26:23 2018 : Debug : format = "*DHCP-Client-Hardware-Address:=DHCP-Your-IP-Address" Thu Dec 6 04:26:23 2018 : Debug : delimiter = "," Thu Dec 6 04:26:23 2018 : Debug : ignore_nislike = yes Thu Dec 6 04:26:23 2018 : Debug : ignore_empty = yes Thu Dec 6 04:26:23 2018 : Debug : allow_multiple_keys = no Thu Dec 6 04:26:23 2018 : Debug : hash_size = 100 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Info : libfreeradius-redis: libhiredis version: 0.12.1 Thu Dec 6 04:26:23 2018 : Debug : Loading dictionary rlm_redis_ippool Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_redis_ippool" Thu Dec 6 04:26:23 2018 : Debug : redis_ippool { Thu Dec 6 04:26:23 2018 : Debug : copy_on_update = yes Thu Dec 6 04:26:23 2018 : Debug : redis { Thu Dec 6 04:26:23 2018 : Debug : server = "10.43.16.224" Thu Dec 6 04:26:23 2018 : Debug : port = 6379 Thu Dec 6 04:26:23 2018 : Debug : database = 0 Thu Dec 6 04:26:23 2018 : Debug : max_nodes = 20 Thu Dec 6 04:26:23 2018 : Debug : max_alt = 3 Thu Dec 6 04:26:23 2018 : Debug : max_redirects = 2 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Info : libfreeradius-redis: libhiredis version: 0.12.1 Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_redis" Thu Dec 6 04:26:23 2018 : Debug : redis { Thu Dec 6 04:26:23 2018 : Debug : server = "10.43.16.224" Thu Dec 6 04:26:23 2018 : Debug : port = 6379 Thu Dec 6 04:26:23 2018 : Debug : database = 0 Thu Dec 6 04:26:23 2018 : Debug : max_nodes = 20 Thu Dec 6 04:26:23 2018 : Debug : max_alt = 3 Thu Dec 6 04:26:23 2018 : Debug : max_redirects = 2 Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : instantiate { Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } # modules Thu Dec 6 04:26:23 2018 : Debug : #### Instantiating listeners #### Thu Dec 6 04:26:23 2018 : Debug : Compiling policies in server dhcp { ... } Thu Dec 6 04:26:23 2018 : Debug : compiling - recv DHCP-Discover {...} Thu Dec 6 04:26:23 2018 : Debug : compiling - recv DHCP-Request {...} Thu Dec 6 04:26:23 2018 : Debug : compiling - recv DHCP-Decline {...} Thu Dec 6 04:26:23 2018 : Debug : compiling - recv DHCP-Inform {...} Thu Dec 6 04:26:23 2018 : Debug : compiling - recv DHCP-Release {...} Thu Dec 6 04:26:23 2018 : Debug : compiling - recv DHCP-Lease-Query {...} Thu Dec 6 04:26:23 2018 : Debug : #### Instantiating modules #### Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "attr_filter.access_challenge" Thu Dec 6 04:26:23 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/access_challenge Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "attr_filter.access_reject" Thu Dec 6 04:26:23 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/access_reject Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "attr_filter.accounting_response" Thu Dec 6 04:26:23 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/accounting_response Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "attr_filter.post-proxy" Thu Dec 6 04:26:23 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/post-proxy Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "attr_filter.pre-proxy" Thu Dec 6 04:26:23 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/pre-proxy Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "auth_log" Thu Dec 6 04:26:23 2018 : Debug : rlm_detail (auth_log) - 'User-Password' suppressed, will not appear in detail output Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "cache_eap" Thu Dec 6 04:26:23 2018 : Info : Loaded module "rlm_cache_rbtree" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "detail" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "etc_passwd" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "expiration" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "fail" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "files" Thu Dec 6 04:26:23 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/files/authorize Thu Dec 6 04:26:23 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/files/accounting Thu Dec 6 04:26:23 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/files/pre-proxy Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "handled" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "inner-eap" Thu Dec 6 04:26:23 2018 : Debug : tls-config tls-peer { Thu Dec 6 04:26:23 2018 : Debug : auto_chain = yes Thu Dec 6 04:26:23 2018 : Debug : chain { Thu Dec 6 04:26:23 2018 : Debug : format = pem Thu Dec 6 04:26:23 2018 : Debug : certificate_file = "/usr/local/etc/raddb/certs/rsa/server.pem" Thu Dec 6 04:26:23 2018 : Debug : private_key_password = <<< secret >>> Thu Dec 6 04:26:23 2018 : Debug : private_key_file = "/usr/local/etc/raddb/certs/rsa/server.key" Thu Dec 6 04:26:23 2018 : Debug : ca_file = "/usr/local/etc/raddb/certs/rsa/ca.pem" Thu Dec 6 04:26:23 2018 : Debug : verify_mode = hard Thu Dec 6 04:26:23 2018 : Debug : include_root_ca = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : verify_depth = 0 Thu Dec 6 04:26:23 2018 : Debug : ca_path = "/usr/local/etc/raddb/certs" Thu Dec 6 04:26:23 2018 : Debug : ca_file = "/usr/local/etc/raddb/certs/rsa/ca.pem" Thu Dec 6 04:26:23 2018 : Debug : dh_file = "/usr/local/etc/raddb/certs/dh" Thu Dec 6 04:26:23 2018 : Debug : fragment_size = 16384 Thu Dec 6 04:26:23 2018 : Debug : check_crl = no Thu Dec 6 04:26:23 2018 : Debug : cipher_server_preference = yes Thu Dec 6 04:26:23 2018 : Debug : allow_renegotiation = no Thu Dec 6 04:26:23 2018 : Debug : ecdh_curve = "prime256v1" Thu Dec 6 04:26:23 2018 : Debug : tls_min_version = 1.000000 Thu Dec 6 04:26:23 2018 : Debug : cache { Thu Dec 6 04:26:23 2018 : Debug : lifetime = 86400 Thu Dec 6 04:26:23 2018 : Debug : verify = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : verify { Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : ocsp { Thu Dec 6 04:26:23 2018 : Debug : enable = no Thu Dec 6 04:26:23 2018 : Debug : override_cert_url = no Thu Dec 6 04:26:23 2018 : Debug : use_nonce = yes Thu Dec 6 04:26:23 2018 : Debug : timeout = 0 Thu Dec 6 04:26:23 2018 : Debug : softfail = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : staple { Thu Dec 6 04:26:23 2018 : Debug : enable = no Thu Dec 6 04:26:23 2018 : Debug : override_cert_url = no Thu Dec 6 04:26:23 2018 : Debug : use_nonce = yes Thu Dec 6 04:26:23 2018 : Debug : timeout = 0 Thu Dec 6 04:26:23 2018 : Debug : softfail = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "invalid" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "linelog" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "log_accounting" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "logintime" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "mac2ip" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "mschap" Thu Dec 6 04:26:23 2018 : Debug : mschap: using internal authentication Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "noop" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "notfound" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "ok" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "pam" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "post_proxy_log" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "pre_proxy_log" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "radius" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "redis" Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Initialising connection pool Thu Dec 6 04:26:23 2018 : Debug : pool { Thu Dec 6 04:26:23 2018 : Debug : start = 4 Thu Dec 6 04:26:23 2018 : Debug : min = 1 Thu Dec 6 04:26:23 2018 : Debug : max = 4 Thu Dec 6 04:26:23 2018 : Debug : max_pending = 0 Thu Dec 6 04:26:23 2018 : Debug : spare = 1 Thu Dec 6 04:26:23 2018 : Debug : uses = 0 Thu Dec 6 04:26:23 2018 : Debug : lifetime = 86400 Thu Dec 6 04:26:23 2018 : Debug : cleanup_interval = 300 Thu Dec 6 04:26:23 2018 : Debug : idle_timeout = 600 Thu Dec 6 04:26:23 2018 : Debug : connect_timeout = 3.000000 Thu Dec 6 04:26:23 2018 : Debug : held_trigger_min = 0.000000 Thu Dec 6 04:26:23 2018 : Debug : held_trigger_max = 0.500000 Thu Dec 6 04:26:23 2018 : Debug : retry_delay = 30 Thu Dec 6 04:26:23 2018 : Debug : spread = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (0), 1 of 4 pending slots used Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (1), 1 of 3 pending slots used Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (2), 1 of 2 pending slots used Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (3), 1 of 1 pending slots used Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Reserved connection (3) Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis): Bootstrap server "10.43.16.224" returned: ERR This instance has cluster support disabled Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Released connection (3) Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "redis_ippool" Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Initialising connection pool Thu Dec 6 04:26:23 2018 : Debug : pool { Thu Dec 6 04:26:23 2018 : Debug : start = 0 Thu Dec 6 04:26:23 2018 : Debug : min = 4 Thu Dec 6 04:26:23 2018 : Debug : max = 4 Thu Dec 6 04:26:23 2018 : Debug : max_pending = 0 Thu Dec 6 04:26:23 2018 : Debug : spare = 1 Thu Dec 6 04:26:23 2018 : Debug : uses = 0 Thu Dec 6 04:26:23 2018 : Debug : lifetime = 0 Thu Dec 6 04:26:23 2018 : Debug : cleanup_interval = 30 Thu Dec 6 04:26:23 2018 : Debug : idle_timeout = 60 Thu Dec 6 04:26:23 2018 : Debug : connect_timeout = 3.000000 Thu Dec 6 04:26:23 2018 : Debug : held_trigger_min = 0.000000 Thu Dec 6 04:26:23 2018 : Debug : held_trigger_max = 0.500000 Thu Dec 6 04:26:23 2018 : Debug : retry_delay = 30 Thu Dec 6 04:26:23 2018 : Debug : spread = no Thu Dec 6 04:26:23 2018 : Debug : } Thu Dec 6 04:26:23 2018 : Warn : rlm_redis (redis) [1] - Ignoring "spare = 1", forcing to "spare = 0" Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - 0 of 0 connections in use. You may need to increase "spare" Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (0), 1 of 4 pending slots used Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Reserved connection (0) Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Released connection (0) Thu Dec 6 04:26:23 2018 : Info : rlm_redis (redis) [1] - Need 3 more connections to reach min connections (4) Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (1), 1 of 3 pending slots used Thu Dec 6 04:26:23 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "reject" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "reply_log" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "stats" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "updated" Thu Dec 6 04:26:23 2018 : Debug : Instantiating module "userlock" Thu Dec 6 04:26:23 2018 : Debug : [1] radius - Connection initialising Thu Dec 6 04:26:23 2018 : Debug : [1] radius - Connection initialised Thu Dec 6 04:26:23 2018 : Debug : Scheduler created in single-threaded mode Thu Dec 6 04:26:23 2018 : Debug : #### Opening listener interfaces #### Thu Dec 6 04:26:23 2018 : Debug : Listening on dhcpv4 address proto_dhcpv4_udp server 10.43.18.92 port 67 bound to virtual s erver dhcp Thu Dec 6 04:26:23 2018 : Debug : Waking up in 4.9 seconds. Thu Dec 6 04:26:23 2018 : Debug : radius - Connection open - proto udp local 0.0.0.0 port 37614 remote 127.0.0.1 port 1812 Thu Dec 6 04:26:23 2018 : Debug : radius - Allocated Status-Server ID 0 for status checks on connection proto udp local 0.0. 0.0 port 37614 remote 127.0.0.1 port 1812 Thu Dec 6 04:26:23 2018 : Debug : radius - Setting idle timeout to +5.000000 for connection proto udp local 0.0.0.0 port 376 14 remote 127.0.0.1 port 1812 Thu Dec 6 04:26:23 2018 : Debug : [1] radius - Connection established Thu Dec 6 04:26:23 2018 : Debug : Waking up in 4.9 seconds. Thu Dec 6 04:26:23 2018 : Debug : Waking up in 4.9 seconds. Thu Dec 6 04:26:28 2018 : Debug : radius - Idle timeout for connection proto udp local 0.0.0.0 port 37614 remote 127.0.0.1 p ort 1812 Thu Dec 6 04:26:28 2018 : Debug : [1] radius - Closing connection (18) Thu Dec 6 04:26:28 2018 : Debug : radius - Connection closed - proto udp local 0.0.0.0 port 37614 remote 127.0.0.1 port 1812 Thu Dec 6 04:26:28 2018 : Info : Ready to process requests Thu Dec 6 04:26:32 2018 : Debug : proto_dhcpv4_udp - Received DHCP-Discover XID 00000000 length 304 proto_dhcpv4_udp server 10.43.18.92 port 67 Thu Dec 6 04:26:32 2018 : Debug : Network received packet size 304 Thu Dec 6 04:26:32 2018 : Debug : Resetting worker 30 cleanup timer to +0s Thu Dec 6 04:26:32 2018 : Debug : (0) running request (0) Thu Dec 6 04:26:32 2018 : Debug : Received DHCP-Discover XID 00000000 from 127.0.0.1:67 to 10.43.18.92:67 via lo (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Opcode = Client-Message (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Hardware-Type = Ethernet (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Hardware-Address-Length = 6 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Hop-Count = 1 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Transaction-Id = 0 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Number-of-Seconds = 0 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Flags = 0 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Client-IP-Address = 127.0.0.1 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Your-IP-Address = 0.0.0.0 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Server-IP-Address = 0.0.0.0 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Gateway-IP-Address = 127.0.0.1 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Client-Hardware-Address = 00:a0:bc:00:00:01 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Message-Type = DHCP-Discover (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Subnet-Mask (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Broadcast-Address (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Time-Offset (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Router-Address (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Domain-Name (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Domain-Name-Server (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Hostname (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Subscriber-Id = "00a0bc000001(a)aut.res.viasat.com" (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Relay-Remote-Id = 0x00a0bc000001 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Relay-Circuit-Id = 0x000000222066 (0) Thu Dec 6 04:26:32 2018 : Debug : Running 'recv DHCP-Discover' from file /usr/local/etc/raddb/sites-enabled/dhcp (0) Thu Dec 6 04:26:32 2018 : Debug : recv DHCP-Discover { (0) Thu Dec 6 04:26:32 2018 : Debug : update reply { (0) Thu Dec 6 04:26:32 2018 : Debug : DHCP-Message-Type = DHCP-Offer (0) Thu Dec 6 04:26:32 2018 : Debug : } # update reply (noop) (0) Thu Dec 6 04:26:32 2018 : Debug : update reply { (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Subnet-Mask = 255.255.255.0 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Router-Address = 10.43.18.92 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-IP-Address-Lease-Time = 900 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 (0) Thu Dec 6 04:26:32 2018 : Debug : } # update reply (noop) (0) Thu Dec 6 04:26:32 2018 : Debug : update control { (0) Thu Dec 6 04:26:32 2018 : Debug : &Pool-Name := "local" (0) Thu Dec 6 04:26:32 2018 : Debug : } # update control (noop) (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - Allocating lease from pool "local", to "00:a0:bc:00:00:01", expires in 900s (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - Reserved connection (1) (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - [1] >>> Sending command(s) to 10.43.16.224:6379 (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - [1] <<< Returned: success (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - Released connection (1) (0) Thu Dec 6 04:26:32 2018 : Info : redis_ippool - Need 2 more connections to reach min connections (4) (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - Opening additional connection (2), 1 of 2 pending slots used Thu Dec 6 04:26:32 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - &reply:DHCP-Your-IP-Address := 192.168.24.0 (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - &reply:DHCP-IP-Address-Lease-Time := 463 (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - IP address lease allocated (0) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool (updated) (0) Thu Dec 6 04:26:32 2018 : Debug : ok (ok) (0) Thu Dec 6 04:26:32 2018 : Debug : } # recv DHCP-Discover (updated) (0) Thu Dec 6 04:26:32 2018 : Debug : Sent DHCP-Offer XID 00000000 from 10.43.18.92:67 to 127.0.0.1:67 via lo (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Message-Type = DHCP-Offer (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Subnet-Mask = 255.255.255.0 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Router-Address = 10.43.18.92 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-IP-Address-Lease-Time := 463 (0) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 Thu Dec 6 04:26:32 2018 : Debug : (0) done request Thu Dec 6 04:26:32 2018 : Debug : (0) finished request. Thu Dec 6 04:26:32 2018 : Info : Ready to process requests Thu Dec 6 04:26:32 2018 : Debug : Reply will be unicast to CIADDR from original packet. Thu Dec 6 04:26:32 2018 : Debug : proto_dhcpv4_udp - cleaning up ID 1 Thu Dec 6 04:26:32 2018 : Info : Ready to process requests Thu Dec 6 04:26:32 2018 : Debug : proto_dhcpv4_udp - Received DHCP-Request XID 00000000 length 325 proto_dhcpv4_udp server 1 0.43.18.92 port 67 Thu Dec 6 04:26:32 2018 : Debug : Network received packet size 325 Thu Dec 6 04:26:32 2018 : Debug : Resetting worker 30 cleanup timer to +0s Thu Dec 6 04:26:32 2018 : Debug : (1) running request (1) Thu Dec 6 04:26:32 2018 : Debug : Received DHCP-Request XID 00000000 from 127.0.0.1:67 to 10.43.18.92:67 via lo (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Opcode = Client-Message (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Hardware-Type = Ethernet (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Hardware-Address-Length = 6 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Hop-Count = 1 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Transaction-Id = 0 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Number-of-Seconds = 0 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Flags = 0 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Client-IP-Address = 127.0.0.1 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Your-IP-Address = 0.0.0.0 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Server-IP-Address = 0.0.0.0 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Gateway-IP-Address = 127.0.0.1 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Client-Hardware-Address = 00:a0:bc:00:00:01 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Requested-IP-Address = 192.168.24.0 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Message-Type = DHCP-Request (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Subnet-Mask (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Broadcast-Address (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Time-Offset (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Router-Address (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Domain-Name (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Domain-Name-Server (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Hostname (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Client-Identifier = 0x01afac00000000 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Subscriber-Id = "00a0bc000001(a)aut.res.viasat.com" (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Relay-Remote-Id = 0x00a0bc000001 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Relay-Circuit-Id = 0x000000222066 (1) Thu Dec 6 04:26:32 2018 : Debug : Running 'recv DHCP-Request' from file /usr/local/etc/raddb/sites-enabled/dhcp (1) Thu Dec 6 04:26:32 2018 : Debug : recv DHCP-Request { (1) Thu Dec 6 04:26:32 2018 : Debug : update reply { (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Message-Type = DHCP-Ack (1) Thu Dec 6 04:26:32 2018 : Debug : } # update reply (noop) (1) Thu Dec 6 04:26:32 2018 : Debug : update reply { (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Subnet-Mask = 255.255.255.0 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Router-Address = 10.43.18.92 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-IP-Address-Lease-Time = 900 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 (1) Thu Dec 6 04:26:32 2018 : Debug : } # update reply (noop) (1) Thu Dec 6 04:26:32 2018 : Debug : update control { (1) Thu Dec 6 04:26:32 2018 : Debug : &Pool-Name := "local" (1) Thu Dec 6 04:26:32 2018 : Debug : } # update control (noop) (1) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - Allocating lease from pool "local", to "00:a0:bc:00:00:01", expires in 900s (1) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - Reserved connection (2) (1) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - [1] >>> Sending command(s) to 10.43.16.224:6379 (1) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - [1] <<< Returned: success (1) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - Released connection (2) (1) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - &reply:DHCP-Your-IP-Address := 192.168.24.0 (1) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - &reply:DHCP-IP-Address-Lease-Time := 463 (1) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool - IP address lease allocated (1) Thu Dec 6 04:26:32 2018 : Debug : redis_ippool (updated) (1) Thu Dec 6 04:26:32 2018 : Debug : if (updated) { (1) Thu Dec 6 04:26:32 2018 : Debug : update reply { (1) Thu Dec 6 04:26:32 2018 : Debug : EXPAND %{control:Pool-Name} (1) Thu Dec 6 04:26:32 2018 : Debug : --> local (1) Thu Dec 6 04:26:32 2018 : Debug : Reserved connection (3) (1) Thu Dec 6 04:26:32 2018 : Debug : [1] >>> Sending command(s) to 10.43.16.224:6379 (1) Thu Dec 6 04:26:32 2018 : Debug : Executing command: GET (1) Thu Dec 6 04:26:32 2018 : Debug : With arguments (1) Thu Dec 6 04:26:32 2018 : Debug : [1] local:option (1) Thu Dec 6 04:26:32 2018 : Debug : [1] <<< Returned: success (1) Thu Dec 6 04:26:32 2018 : Debug : Released connection (3) (1) Thu Dec 6 04:26:32 2018 : Debug : EXPAND %{redis: GET %{control:Pool-Name}:option} (1) Thu Dec 6 04:26:32 2018 : Debug : (%{redis: GET local:option}) (1) Thu Dec 6 04:26:32 2018 : Debug : --> 010300a0bc0209555400000000000007030e5554000000000000030703070016041155545 f332e372e332e372e32322e62696e05040a4fff0f0c0200010e010014530100020103110500440044070043004301000201030606c0a86400180700500050 01010201060a000000080101020106ac1000000c0101020106c0a80000100101020106a9fe00001001010201067f00000008330c555432000000000000002 9083b0e55543200000000000307030600003c115554325f332e372e332e362e302e62696e3d040a4fff06 (1) Thu Dec 6 04:26:32 2018 : Debug : EXPAND %{bin:%{redis: GET %{control:Pool-Name}:option}} (1) Thu Dec 6 04:26:32 2018 : Debug : (%{bin:010300a0bc0209555400000000000007030e555400000000000003070307001604 1155545f332e372e332e372e32322e62696e05040a4fff0f0c0200010e010014530100020103110500440044070043004301000201030606c0a8640018070 050005001010201060a000000080101020106ac1000000c0101020106c0a80000100101020106a9fe00001001010201067f00000008330c55543200000000 00000029083b0e55543200000000000307030600003c115554325f332e372e332e362e302e62696e3d040a4fff06}) (1) Thu Dec 6 04:26:32 2018 : Debug : --> 0x010300a0bc0209555400000000000007030e55540000000000000307030700160411555 45f332e372e332e372e32322e62696e05040a4fff0f0c0200010e010014530100020103110500440044070043004301000201030606c0a864001807005000 5001010201060a000000080101020106ac1000000c0101020106c0a80000100101020106a9fe00001001010201067f00000008330c5554320000000000000 029083b0e55543200000000000307030600003c115554325f332e372e332e362e302e62696e3d040a4fff06 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Vendor = 0x010300a0bc0209555400000000000007030e55540000000000000307030700 16041155545f332e372e332e372e32322e62696e05040a4fff0f0c0200010e010014530100020103110500440044070043004301000201030606c0a864001 8070050005001010201060a000000080101020106ac1000000c0101020106c0a80000100101020106a9fe00001001010201067f00000008330c5554320000 000000000029083b0e55543200000000000307030600003c115554325f332e372e332e362e302e62696e3d040a4fff06 (1) Thu Dec 6 04:26:32 2018 : Debug : } # update reply (noop) (1) Thu Dec 6 04:26:32 2018 : Debug : } # if (updated) (noop) (1) Thu Dec 6 04:26:32 2018 : Debug : ok (ok) (1) Thu Dec 6 04:26:32 2018 : Debug : } # recv DHCP-Request (updated) (1) Thu Dec 6 04:26:32 2018 : Debug : Sent DHCP-Ack XID 00000000 from 10.43.18.92:67 to 127.0.0.1:67 via lo (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Message-Type = DHCP-Ack (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Subnet-Mask = 255.255.255.0 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Router-Address = 10.43.18.92 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-IP-Address-Lease-Time := 463 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 (1) Thu Dec 6 04:26:32 2018 : Debug : &DHCP-Vendor = 0x010300a0bc0209555400000000000007030e555400000000000003070307001604 1155545f332e372e332e372e32322e62696e05040a4fff0f0c0200010e010014530100020103110500440044070043004301000201030606c0a8640018070 050005001010201060a000000080101020106ac1000000c0101020106c0a80000100101020106a9fe00001001010201067f00000008330c55543200000000 00000029083b0e55543200000000000307030600003c115554325f332e372e332e362e302e62696e3d040a4fff06 Thu Dec 6 04:26:32 2018 : Debug : (1) done request Thu Dec 6 04:26:32 2018 : Debug : (1) finished request. Thu Dec 6 04:26:32 2018 : Info : Ready to process requests Thu Dec 6 04:26:32 2018 : Debug : Reply will be unicast to CIADDR from original packet. Thu Dec 6 04:26:32 2018 : Debug : proto_dhcpv4_udp - cleaning up ID 1 Thu Dec 6 04:26:32 2018 : Info : Ready to process requests Thu Dec 6 04:26:37 2018 : Info : Ready to process requests Thu Dec 6 04:26:37 2018 : Info : Signalled to terminate Thu Dec 6 04:26:37 2018 : Info : Exiting normally Thu Dec 6 10:40:16 2018 : Info : FreeRADIUS Version 4.0.0 Thu Dec 6 10:40:16 2018 : Info : Copyright 1999-2018 The FreeRADIUS server project and contributors Thu Dec 6 10:40:16 2018 : Info : There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Thu Dec 6 10:40:16 2018 : Info : PARTICULAR PURPOSE Thu Dec 6 10:40:16 2018 : Info : You may redistribute copies of FreeRADIUS under the terms of the Thu Dec 6 10:40:16 2018 : Info : GNU General Public License Thu Dec 6 10:40:16 2018 : Info : For more information about these matters, see the file named COPYRIGHT Thu Dec 6 10:40:16 2018 : Info : Starting - reading configuration files ... Thu Dec 6 10:40:16 2018 : Debug : Including dictionary file "/usr/local/share/freeradius/dictionary" Thu Dec 6 10:40:16 2018 : Debug : Including dictionary file "/usr/local/etc/raddb/dictionary" Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/radiusd.conf Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/clients.conf Thu Dec 6 10:40:16 2018 : Debug : Including files in directory "/usr/local/etc/raddb/mods-enabled/" Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/always Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/attr_filter Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/cache_eap Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/chap Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/client Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/detail Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/detail.log Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/digest Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/dhcpv4 Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/eap_inner Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/echo Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/escape Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/exec Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/expiration Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/expr Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/files Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/linelog Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/logintime Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/mschap Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/ntlm_auth Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/pam Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/pap Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/passwd Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/radius Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/radutmp Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/soh Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/sradutmp Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/stats Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/unix Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/unpack Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/utf8 Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/mac2ip Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/redis_ippool Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/mods-enabled/redis Thu Dec 6 10:40:16 2018 : Debug : Including files in directory "/usr/local/etc/raddb/policy.d/" Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/abfab-tr Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/accounting Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/canonicalization Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/control Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/cui Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/debug Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/dhcp Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/eap Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/filter Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/operator-name Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/time Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/policy.d/vendor Thu Dec 6 10:40:16 2018 : Debug : Including files in directory "/usr/local/etc/raddb/sites-enabled/" Thu Dec 6 10:40:16 2018 : Debug : including configuration file /usr/local/etc/raddb/sites-enabled/dhcp Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary proto_dhcpv4 Thu Dec 6 10:40:16 2018 : Info : Loaded module "proto_dhcpv4" Thu Dec 6 10:40:16 2018 : Debug : Parsing security rules to bootstrap UID / GID / chroot / etc. Thu Dec 6 10:40:16 2018 : Debug : main { Thu Dec 6 10:40:16 2018 : Debug : security { Thu Dec 6 10:40:16 2018 : Debug : allow_core_dumps = no Thu Dec 6 10:40:16 2018 : Debug : allow_vulnerable_openssl = "no" Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : name = radiusd Thu Dec 6 10:40:16 2018 : Debug : name = "radiusd" Thu Dec 6 10:40:16 2018 : Debug : prefix = "/usr/local" Thu Dec 6 10:40:16 2018 : Debug : local_state_dir = "/usr/local/var" Thu Dec 6 10:40:16 2018 : Debug : run_dir = "/usr/local/var/run/radiusd" Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Parsing main configuration. Thu Dec 6 10:40:16 2018 : Debug : main { Thu Dec 6 10:40:16 2018 : Debug : server dhcp { Thu Dec 6 10:40:16 2018 : Debug : namespace = "dhcpv4" Thu Dec 6 10:40:16 2018 : Debug : listen { Thu Dec 6 10:40:16 2018 : Debug : type = DHCP-Discover Thu Dec 6 10:40:16 2018 : Info : Loaded module "proto_dhcpv4_base" Thu Dec 6 10:40:16 2018 : Debug : type = DHCP-Request Thu Dec 6 10:40:16 2018 : Debug : type = DHCP-Inform Thu Dec 6 10:40:16 2018 : Debug : type = DHCP-Release Thu Dec 6 10:40:16 2018 : Debug : type = DHCP-Decline Thu Dec 6 10:40:16 2018 : Debug : transport = udp Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary proto_dhcpv4_udp Thu Dec 6 10:40:16 2018 : Info : Loaded module "proto_dhcpv4_udp" Thu Dec 6 10:40:16 2018 : Debug : udp { Thu Dec 6 10:40:16 2018 : Debug : ipaddr = 10.43.18.92 Thu Dec 6 10:40:16 2018 : Debug : port = 67 Thu Dec 6 10:40:16 2018 : Debug : broadcast = no Thu Dec 6 10:40:16 2018 : Debug : networks { Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : max_packet_size = 4096 Thu Dec 6 10:40:16 2018 : Debug : max_attributes = 0 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : limit { Thu Dec 6 10:40:16 2018 : Debug : idle_timeout = 30.000000 Thu Dec 6 10:40:16 2018 : Debug : nak_lifetime = 30.000000 Thu Dec 6 10:40:16 2018 : Debug : max_connections = 1024 Thu Dec 6 10:40:16 2018 : Debug : max_clients = 256 Thu Dec 6 10:40:16 2018 : Debug : max_pending_packets = 256 Thu Dec 6 10:40:16 2018 : Debug : priority { Thu Dec 6 10:40:16 2018 : Debug : DHCP-Discover = normal Thu Dec 6 10:40:16 2018 : Debug : DHCP-Request = normal Thu Dec 6 10:40:16 2018 : Debug : DHCP-Decline = normal Thu Dec 6 10:40:16 2018 : Debug : DHCP-Release = normal Thu Dec 6 10:40:16 2018 : Debug : DHCP-Inform = normal Thu Dec 6 10:40:16 2018 : Debug : DHCP-Lease-Query = low Thu Dec 6 10:40:16 2018 : Debug : DHCP-Bulk-Lease-Query = low Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : security { Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : sbin_dir = "/usr/local/sbin" Thu Dec 6 10:40:16 2018 : Debug : logdir = "/usr/local/var/log/radius" Thu Dec 6 10:40:16 2018 : Debug : libdir = "/usr/local/lib" Thu Dec 6 10:40:16 2018 : Debug : radacctdir = "/usr/local/var/log/radius/radacct" Thu Dec 6 10:40:16 2018 : Debug : reverse_lookups = no Thu Dec 6 10:40:16 2018 : Debug : reverse_lookups = no Thu Dec 6 10:40:16 2018 : Debug : hostname_lookups = yes Thu Dec 6 10:40:16 2018 : Debug : hostname_lookups = yes Thu Dec 6 10:40:16 2018 : Debug : max_request_time = 30 Thu Dec 6 10:40:16 2018 : Debug : max_request_time = 30 Thu Dec 6 10:40:16 2018 : Debug : pidfile = "/usr/local/var/run/radiusd/radiusd.pid" Thu Dec 6 10:40:16 2018 : Debug : debug_level = 0 Thu Dec 6 10:40:16 2018 : Debug : log { Thu Dec 6 10:40:16 2018 : Debug : colourise = yes Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : resources { Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : thread pool { Thu Dec 6 10:40:16 2018 : Debug : num_networks = 1 Thu Dec 6 10:40:16 2018 : Debug : num_networks = 1 Thu Dec 6 10:40:16 2018 : Debug : num_workers = 4 Thu Dec 6 10:40:16 2018 : Debug : num_workers = 4 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Info : Switching to configured log settings Thu Dec 6 10:40:16 2018 : Debug : radiusd: #### Loading Clients #### Thu Dec 6 10:40:16 2018 : Debug : client localhost { Thu Dec 6 10:40:16 2018 : Debug : ipaddr = 127.0.0.1 Thu Dec 6 10:40:16 2018 : Debug : require_message_authenticator = no Thu Dec 6 10:40:16 2018 : Debug : secret = <<< secret >>> Thu Dec 6 10:40:16 2018 : Debug : proto = "*" Thu Dec 6 10:40:16 2018 : Debug : limit { Thu Dec 6 10:40:16 2018 : Debug : max_connections = 16 Thu Dec 6 10:40:16 2018 : Debug : lifetime = 0 Thu Dec 6 10:40:16 2018 : Debug : idle_timeout = 30 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : client localhost_ipv6 { Thu Dec 6 10:40:16 2018 : Debug : ipv6addr = ::1 Thu Dec 6 10:40:16 2018 : Debug : require_message_authenticator = no Thu Dec 6 10:40:16 2018 : Debug : secret = <<< secret >>> Thu Dec 6 10:40:16 2018 : Debug : limit { Thu Dec 6 10:40:16 2018 : Debug : max_connections = 16 Thu Dec 6 10:40:16 2018 : Debug : lifetime = 0 Thu Dec 6 10:40:16 2018 : Debug : idle_timeout = 30 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : client private-network-1 { Thu Dec 6 10:40:16 2018 : Debug : ipaddr = 10.43.18.0/24 Thu Dec 6 10:40:16 2018 : Debug : require_message_authenticator = no Thu Dec 6 10:40:16 2018 : Debug : secret = <<< secret >>> Thu Dec 6 10:40:16 2018 : Debug : limit { Thu Dec 6 10:40:16 2018 : Debug : max_connections = 16 Thu Dec 6 10:40:16 2018 : Debug : lifetime = 0 Thu Dec 6 10:40:16 2018 : Debug : idle_timeout = 30 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Info : Debugger not attached Thu Dec 6 10:40:16 2018 : Debug : #### Bootstrapping listeners #### Thu Dec 6 10:40:16 2018 : Debug : #### Bootstrapping modules #### Thu Dec 6 10:40:16 2018 : Debug : modules { Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_always" Thu Dec 6 10:40:16 2018 : Debug : always reject { Thu Dec 6 10:40:16 2018 : Debug : rcode = "reject" Thu Dec 6 10:40:16 2018 : Debug : simulcount = 0 Thu Dec 6 10:40:16 2018 : Debug : mpp = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : always fail { Thu Dec 6 10:40:16 2018 : Debug : rcode = "fail" Thu Dec 6 10:40:16 2018 : Debug : simulcount = 0 Thu Dec 6 10:40:16 2018 : Debug : mpp = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : always ok { Thu Dec 6 10:40:16 2018 : Debug : rcode = "ok" Thu Dec 6 10:40:16 2018 : Debug : simulcount = 0 Thu Dec 6 10:40:16 2018 : Debug : mpp = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : always handled { Thu Dec 6 10:40:16 2018 : Debug : rcode = "handled" Thu Dec 6 10:40:16 2018 : Debug : simulcount = 0 Thu Dec 6 10:40:16 2018 : Debug : mpp = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : always invalid { Thu Dec 6 10:40:16 2018 : Debug : rcode = "invalid" Thu Dec 6 10:40:16 2018 : Debug : simulcount = 0 Thu Dec 6 10:40:16 2018 : Debug : mpp = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : always userlock { Thu Dec 6 10:40:16 2018 : Debug : rcode = "userlock" Thu Dec 6 10:40:16 2018 : Debug : simulcount = 0 Thu Dec 6 10:40:16 2018 : Debug : mpp = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : always notfound { Thu Dec 6 10:40:16 2018 : Debug : rcode = "notfound" Thu Dec 6 10:40:16 2018 : Debug : simulcount = 0 Thu Dec 6 10:40:16 2018 : Debug : mpp = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : always noop { Thu Dec 6 10:40:16 2018 : Debug : rcode = "noop" Thu Dec 6 10:40:16 2018 : Debug : simulcount = 0 Thu Dec 6 10:40:16 2018 : Debug : mpp = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : always updated { Thu Dec 6 10:40:16 2018 : Debug : rcode = "updated" Thu Dec 6 10:40:16 2018 : Debug : simulcount = 0 Thu Dec 6 10:40:16 2018 : Debug : mpp = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_attr_filter Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_attr_filter" Thu Dec 6 10:40:16 2018 : Debug : attr_filter attr_filter.pre-proxy { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/pre-proxy" Thu Dec 6 10:40:16 2018 : Debug : relaxed = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : attr_filter attr_filter.post-proxy { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/post-proxy" Thu Dec 6 10:40:16 2018 : Debug : relaxed = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : attr_filter attr_filter.access_reject { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_reject" Thu Dec 6 10:40:16 2018 : Debug : relaxed = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : attr_filter attr_filter.access_challenge { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_challenge" Thu Dec 6 10:40:16 2018 : Debug : relaxed = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : attr_filter attr_filter.accounting_response { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/attr_filter/accounting_response" Thu Dec 6 10:40:16 2018 : Debug : relaxed = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_cache Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_cache" Thu Dec 6 10:40:16 2018 : Debug : cache cache_eap { Thu Dec 6 10:40:16 2018 : Debug : driver = "rlm_cache_rbtree" Thu Dec 6 10:40:16 2018 : Debug : ttl = 15 Thu Dec 6 10:40:16 2018 : Debug : max_entries = 0 Thu Dec 6 10:40:16 2018 : Debug : epoch = 0 Thu Dec 6 10:40:16 2018 : Debug : add_stats = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_chap Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_chap" Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_client" Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_detail Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_detail" Thu Dec 6 10:40:16 2018 : Debug : detail { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/detail-%Y-%m-%d" Thu Dec 6 10:40:16 2018 : Debug : header = "%t" Thu Dec 6 10:40:16 2018 : Debug : permissions = 384 Thu Dec 6 10:40:16 2018 : Debug : locking = no Thu Dec 6 10:40:16 2018 : Debug : escape_filenames = no Thu Dec 6 10:40:16 2018 : Debug : log_packet_header = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : detail auth_log { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/auth-detail-%Y-%m-%d" Thu Dec 6 10:40:16 2018 : Debug : header = "%t" Thu Dec 6 10:40:16 2018 : Debug : permissions = 384 Thu Dec 6 10:40:16 2018 : Debug : locking = no Thu Dec 6 10:40:16 2018 : Debug : escape_filenames = no Thu Dec 6 10:40:16 2018 : Debug : log_packet_header = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : detail reply_log { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/reply-detail-%Y-%m-%d" Thu Dec 6 10:40:16 2018 : Debug : header = "%t" Thu Dec 6 10:40:16 2018 : Debug : permissions = 384 Thu Dec 6 10:40:16 2018 : Debug : locking = no Thu Dec 6 10:40:16 2018 : Debug : escape_filenames = no Thu Dec 6 10:40:16 2018 : Debug : log_packet_header = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : detail pre_proxy_log { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/pre-proxy-detail-%Y-%m-%d" Thu Dec 6 10:40:16 2018 : Debug : header = "%t" Thu Dec 6 10:40:16 2018 : Debug : permissions = 384 Thu Dec 6 10:40:16 2018 : Debug : locking = no Thu Dec 6 10:40:16 2018 : Debug : escape_filenames = no Thu Dec 6 10:40:16 2018 : Debug : log_packet_header = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : detail post_proxy_log { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-S rc-IPv6-Address}}/post-proxy-detail-%Y-%m-%d" Thu Dec 6 10:40:16 2018 : Debug : header = "%t" Thu Dec 6 10:40:16 2018 : Debug : permissions = 384 Thu Dec 6 10:40:16 2018 : Debug : locking = no Thu Dec 6 10:40:16 2018 : Debug : escape_filenames = no Thu Dec 6 10:40:16 2018 : Debug : log_packet_header = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_digest Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_digest" Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_dhcpv4" Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_eap Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_eap" Thu Dec 6 10:40:16 2018 : Debug : eap inner-eap { Thu Dec 6 10:40:16 2018 : Debug : default_eap_type = mschapv2 Thu Dec 6 10:40:16 2018 : Debug : type = md5 Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_eap_md5 Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_eap_md5" Thu Dec 6 10:40:16 2018 : Debug : type = gtc Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_eap_gtc Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_eap_gtc" Thu Dec 6 10:40:16 2018 : Debug : gtc { Thu Dec 6 10:40:16 2018 : Debug : challenge = "Password: " Thu Dec 6 10:40:16 2018 : Debug : auth_type = PAP Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : type = mschapv2 Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_eap_mschapv2 Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_eap_mschapv2" Thu Dec 6 10:40:16 2018 : Debug : mschapv2 { Thu Dec 6 10:40:16 2018 : Debug : with_ntdomain_hack = no Thu Dec 6 10:40:16 2018 : Debug : auth_type = mschap Thu Dec 6 10:40:16 2018 : Debug : send_error = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : type = tls Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_eap_tls Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_eap_tls" Thu Dec 6 10:40:16 2018 : Debug : tls { Thu Dec 6 10:40:16 2018 : Debug : tls = "tls-peer" Thu Dec 6 10:40:16 2018 : Debug : require_client_cert = yes Thu Dec 6 10:40:16 2018 : Debug : include_length = yes Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : ignore_unknown_eap_types = no Thu Dec 6 10:40:16 2018 : Debug : cisco_accounting_username_bug = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_exec" Thu Dec 6 10:40:16 2018 : Debug : exec echo { Thu Dec 6 10:40:16 2018 : Debug : wait = yes Thu Dec 6 10:40:16 2018 : Debug : program = "/bin/echo %{User-Name}" Thu Dec 6 10:40:16 2018 : Debug : input_pairs = "request" Thu Dec 6 10:40:16 2018 : Debug : output_pairs = "reply" Thu Dec 6 10:40:16 2018 : Debug : shell_escape = yes Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_escape" Thu Dec 6 10:40:16 2018 : Debug : escape { Thu Dec 6 10:40:16 2018 : Debug : safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.- _: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : exec { Thu Dec 6 10:40:16 2018 : Debug : wait = no Thu Dec 6 10:40:16 2018 : Debug : input_pairs = "request" Thu Dec 6 10:40:16 2018 : Debug : shell_escape = yes Thu Dec 6 10:40:16 2018 : Debug : timeout = 10 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_expiration Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_expiration" Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_expr" Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_files Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_files" Thu Dec 6 10:40:16 2018 : Debug : files { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/files/authorize" Thu Dec 6 10:40:16 2018 : Debug : acctusersfile = "/usr/local/etc/raddb/mods-config/files/accounting" Thu Dec 6 10:40:16 2018 : Debug : preproxy_usersfile = "/usr/local/etc/raddb/mods-config/files/pre-proxy" Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_linelog" Thu Dec 6 10:40:16 2018 : Debug : linelog { Thu Dec 6 10:40:16 2018 : Debug : destination = "file" Thu Dec 6 10:40:16 2018 : Debug : delimiter = " " Thu Dec 6 10:40:16 2018 : Debug : file { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/var/log/radius/linelog" Thu Dec 6 10:40:16 2018 : Debug : permissions = 384 Thu Dec 6 10:40:16 2018 : Debug : escape_filenames = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : syslog { Thu Dec 6 10:40:16 2018 : Debug : severity = "info" Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : unix { Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : tcp { Thu Dec 6 10:40:16 2018 : Debug : port = 514 Thu Dec 6 10:40:16 2018 : Debug : timeout = 2.000000 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : udp { Thu Dec 6 10:40:16 2018 : Debug : port = 514 Thu Dec 6 10:40:16 2018 : Debug : timeout = 2.000000 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : linelog log_accounting { Thu Dec 6 10:40:16 2018 : Debug : destination = "file" Thu Dec 6 10:40:16 2018 : Debug : delimiter = " " Thu Dec 6 10:40:16 2018 : Debug : file { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/var/log/radius/linelog-accounting" Thu Dec 6 10:40:16 2018 : Debug : permissions = 384 Thu Dec 6 10:40:16 2018 : Debug : escape_filenames = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : syslog { Thu Dec 6 10:40:16 2018 : Debug : severity = "info" Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : unix { Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : tcp { Thu Dec 6 10:40:16 2018 : Debug : timeout = 1000.000000 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : udp { Thu Dec 6 10:40:16 2018 : Debug : timeout = 1000.000000 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_logintime Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_logintime" Thu Dec 6 10:40:16 2018 : Debug : logintime { Thu Dec 6 10:40:16 2018 : Debug : minimum_timeout = 60 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_mschap" Thu Dec 6 10:40:16 2018 : Debug : mschap { Thu Dec 6 10:40:16 2018 : Debug : use_mppe = yes Thu Dec 6 10:40:16 2018 : Debug : require_encryption = no Thu Dec 6 10:40:16 2018 : Debug : require_strong = no Thu Dec 6 10:40:16 2018 : Debug : with_ntdomain_hack = yes Thu Dec 6 10:40:16 2018 : Debug : passchange { Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : allow_retry = yes Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : exec ntlm_auth { Thu Dec 6 10:40:16 2018 : Debug : wait = yes Thu Dec 6 10:40:16 2018 : Debug : program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap :User-Name} --password=%{User-Password}" Thu Dec 6 10:40:16 2018 : Debug : shell_escape = yes Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_pam Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_pam" Thu Dec 6 10:40:16 2018 : Debug : pam { Thu Dec 6 10:40:16 2018 : Debug : pam_auth = "radiusd" Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_pap Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_pap" Thu Dec 6 10:40:16 2018 : Debug : pap { Thu Dec 6 10:40:16 2018 : Debug : normalise = yes Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_passwd Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_passwd" Thu Dec 6 10:40:16 2018 : Debug : passwd etc_passwd { Thu Dec 6 10:40:16 2018 : Debug : filename = "/etc/passwd" Thu Dec 6 10:40:16 2018 : Debug : format = "*User-Name:Crypt-Password:" Thu Dec 6 10:40:16 2018 : Debug : delimiter = ":" Thu Dec 6 10:40:16 2018 : Debug : ignore_nislike = no Thu Dec 6 10:40:16 2018 : Debug : ignore_empty = yes Thu Dec 6 10:40:16 2018 : Debug : allow_multiple_keys = no Thu Dec 6 10:40:16 2018 : Debug : hash_size = 100 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_radius Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_radius" Thu Dec 6 10:40:16 2018 : Debug : radius { Thu Dec 6 10:40:16 2018 : Debug : transport = udp Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_radius_udp Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_radius_udp" Thu Dec 6 10:40:16 2018 : Debug : udp { Thu Dec 6 10:40:16 2018 : Debug : ipaddr = 127.0.0.1 Thu Dec 6 10:40:16 2018 : Debug : port = 1812 Thu Dec 6 10:40:16 2018 : Debug : secret = "testing123" Thu Dec 6 10:40:16 2018 : Debug : max_packet_size = 4096 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : type = Access-Request Thu Dec 6 10:40:16 2018 : Debug : type = Accounting-Request Thu Dec 6 10:40:16 2018 : Debug : status_checks { Thu Dec 6 10:40:16 2018 : Debug : type = Status-Server Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : max_connections = 32 Thu Dec 6 10:40:16 2018 : Debug : max_attributes = 255 Thu Dec 6 10:40:16 2018 : Debug : connection { Thu Dec 6 10:40:16 2018 : Debug : connect_timeout = 5.000000 Thu Dec 6 10:40:16 2018 : Debug : reconnect_delay = 5.000000 Thu Dec 6 10:40:16 2018 : Debug : idle_timeout = 5.000000 Thu Dec 6 10:40:16 2018 : Debug : zombie_period = 10.000000 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Access-Request { Thu Dec 6 10:40:16 2018 : Debug : initial_retransmission_time = 2 Thu Dec 6 10:40:16 2018 : Debug : maximum_retransmission_time = 16 Thu Dec 6 10:40:16 2018 : Debug : maximum_retransmission_count = 2 Thu Dec 6 10:40:16 2018 : Debug : maximum_retransmission_duration = 30 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Accounting-Request { Thu Dec 6 10:40:16 2018 : Debug : initial_retransmission_time = 2 Thu Dec 6 10:40:16 2018 : Debug : maximum_retransmission_time = 16 Thu Dec 6 10:40:16 2018 : Debug : maximum_retransmission_count = 5 Thu Dec 6 10:40:16 2018 : Debug : maximum_retransmission_duration = 30 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Status-Server { Thu Dec 6 10:40:16 2018 : Debug : initial_retransmission_time = 2 Thu Dec 6 10:40:16 2018 : Debug : maximum_retransmission_time = 16 Thu Dec 6 10:40:16 2018 : Debug : maximum_retransmission_count = 5 Thu Dec 6 10:40:16 2018 : Debug : maximum_retransmission_duration = 30 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_radutmp Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_radutmp" Thu Dec 6 10:40:16 2018 : Debug : radutmp { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/var/log/radius/radutmp" Thu Dec 6 10:40:16 2018 : Debug : username = "%{User-Name}" Thu Dec 6 10:40:16 2018 : Debug : case_sensitive = yes Thu Dec 6 10:40:16 2018 : Debug : check_with_nas = yes Thu Dec 6 10:40:16 2018 : Debug : permissions = 384 Thu Dec 6 10:40:16 2018 : Debug : caller_id = yes Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_soh Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_soh" Thu Dec 6 10:40:16 2018 : Debug : soh { Thu Dec 6 10:40:16 2018 : Debug : dhcp = yes Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : radutmp sradutmp { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/var/log/radius/sradutmp" Thu Dec 6 10:40:16 2018 : Debug : username = "%{User-Name}" Thu Dec 6 10:40:16 2018 : Debug : case_sensitive = yes Thu Dec 6 10:40:16 2018 : Debug : check_with_nas = yes Thu Dec 6 10:40:16 2018 : Debug : permissions = 420 Thu Dec 6 10:40:16 2018 : Debug : caller_id = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_stats Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_stats" Thu Dec 6 10:40:16 2018 : Debug : stats { Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_unix Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_unix" Thu Dec 6 10:40:16 2018 : Debug : unix { Thu Dec 6 10:40:16 2018 : Debug : radwtmp = "/usr/local/var/log/radius/radwtmp" Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Creating attribute Unix-Group Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_unpack Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_unpack" Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_utf8" Thu Dec 6 10:40:16 2018 : Debug : passwd mac2ip { Thu Dec 6 10:40:16 2018 : Debug : filename = "/usr/local/etc/raddb/mods-config/passwd/mac2ip" Thu Dec 6 10:40:16 2018 : Debug : format = "*DHCP-Client-Hardware-Address:=DHCP-Your-IP-Address" Thu Dec 6 10:40:16 2018 : Debug : delimiter = "," Thu Dec 6 10:40:16 2018 : Debug : ignore_nislike = yes Thu Dec 6 10:40:16 2018 : Debug : ignore_empty = yes Thu Dec 6 10:40:16 2018 : Debug : allow_multiple_keys = no Thu Dec 6 10:40:16 2018 : Debug : hash_size = 100 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Info : libfreeradius-redis: libhiredis version: 0.12.1 Thu Dec 6 10:40:16 2018 : Debug : Loading dictionary rlm_redis_ippool Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_redis_ippool" Thu Dec 6 10:40:16 2018 : Debug : redis_ippool { Thu Dec 6 10:40:16 2018 : Debug : copy_on_update = yes Thu Dec 6 10:40:16 2018 : Debug : redis { Thu Dec 6 10:40:16 2018 : Debug : server = "10.43.16.224" Thu Dec 6 10:40:16 2018 : Debug : port = 6379 Thu Dec 6 10:40:16 2018 : Debug : database = 0 Thu Dec 6 10:40:16 2018 : Debug : max_nodes = 20 Thu Dec 6 10:40:16 2018 : Debug : max_alt = 3 Thu Dec 6 10:40:16 2018 : Debug : max_redirects = 2 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Info : libfreeradius-redis: libhiredis version: 0.12.1 Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_redis" Thu Dec 6 10:40:16 2018 : Debug : redis { Thu Dec 6 10:40:16 2018 : Debug : server = "10.43.16.224" Thu Dec 6 10:40:16 2018 : Debug : port = 6379 Thu Dec 6 10:40:16 2018 : Debug : database = 0 Thu Dec 6 10:40:16 2018 : Debug : max_nodes = 20 Thu Dec 6 10:40:16 2018 : Debug : max_alt = 3 Thu Dec 6 10:40:16 2018 : Debug : max_redirects = 2 Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : instantiate { Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } # modules Thu Dec 6 10:40:16 2018 : Debug : #### Instantiating listeners #### Thu Dec 6 10:40:16 2018 : Debug : Compiling policies in server dhcp { ... } Thu Dec 6 10:40:16 2018 : Debug : compiling - recv DHCP-Discover {...} Thu Dec 6 10:40:16 2018 : Debug : compiling - recv DHCP-Request {...} Thu Dec 6 10:40:16 2018 : Debug : compiling - recv DHCP-Decline {...} Thu Dec 6 10:40:16 2018 : Debug : compiling - recv DHCP-Inform {...} Thu Dec 6 10:40:16 2018 : Debug : compiling - recv DHCP-Release {...} Thu Dec 6 10:40:16 2018 : Debug : compiling - recv DHCP-Lease-Query {...} Thu Dec 6 10:40:16 2018 : Debug : #### Instantiating modules #### Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "attr_filter.access_challenge" Thu Dec 6 10:40:16 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/access_challenge Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "attr_filter.access_reject" Thu Dec 6 10:40:16 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/access_reject Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "attr_filter.accounting_response" Thu Dec 6 10:40:16 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/accounting_response Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "attr_filter.post-proxy" Thu Dec 6 10:40:16 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/post-proxy Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "attr_filter.pre-proxy" Thu Dec 6 10:40:16 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/attr_filter/pre-proxy Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "auth_log" Thu Dec 6 10:40:16 2018 : Debug : rlm_detail (auth_log) - 'User-Password' suppressed, will not appear in detail output Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "cache_eap" Thu Dec 6 10:40:16 2018 : Info : Loaded module "rlm_cache_rbtree" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "detail" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "etc_passwd" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "expiration" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "fail" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "files" Thu Dec 6 10:40:16 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/files/authorize Thu Dec 6 10:40:16 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/files/accounting Thu Dec 6 10:40:16 2018 : Debug : Reading file /usr/local/etc/raddb/mods-config/files/pre-proxy Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "handled" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "inner-eap" Thu Dec 6 10:40:16 2018 : Debug : tls-config tls-peer { Thu Dec 6 10:40:16 2018 : Debug : auto_chain = yes Thu Dec 6 10:40:16 2018 : Debug : chain { Thu Dec 6 10:40:16 2018 : Debug : format = pem Thu Dec 6 10:40:16 2018 : Debug : certificate_file = "/usr/local/etc/raddb/certs/rsa/server.pem" Thu Dec 6 10:40:16 2018 : Debug : private_key_password = <<< secret >>> Thu Dec 6 10:40:16 2018 : Debug : private_key_file = "/usr/local/etc/raddb/certs/rsa/server.key" Thu Dec 6 10:40:16 2018 : Debug : ca_file = "/usr/local/etc/raddb/certs/rsa/ca.pem" Thu Dec 6 10:40:16 2018 : Debug : verify_mode = hard Thu Dec 6 10:40:16 2018 : Debug : include_root_ca = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : verify_depth = 0 Thu Dec 6 10:40:16 2018 : Debug : ca_path = "/usr/local/etc/raddb/certs" Thu Dec 6 10:40:16 2018 : Debug : ca_file = "/usr/local/etc/raddb/certs/rsa/ca.pem" Thu Dec 6 10:40:16 2018 : Debug : dh_file = "/usr/local/etc/raddb/certs/dh" Thu Dec 6 10:40:16 2018 : Debug : fragment_size = 16384 Thu Dec 6 10:40:16 2018 : Debug : check_crl = no Thu Dec 6 10:40:16 2018 : Debug : cipher_server_preference = yes Thu Dec 6 10:40:16 2018 : Debug : allow_renegotiation = no Thu Dec 6 10:40:16 2018 : Debug : ecdh_curve = "prime256v1" Thu Dec 6 10:40:16 2018 : Debug : tls_min_version = 1.000000 Thu Dec 6 10:40:16 2018 : Debug : cache { Thu Dec 6 10:40:16 2018 : Debug : lifetime = 86400 Thu Dec 6 10:40:16 2018 : Debug : verify = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : verify { Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : ocsp { Thu Dec 6 10:40:16 2018 : Debug : enable = no Thu Dec 6 10:40:16 2018 : Debug : override_cert_url = no Thu Dec 6 10:40:16 2018 : Debug : use_nonce = yes Thu Dec 6 10:40:16 2018 : Debug : timeout = 0 Thu Dec 6 10:40:16 2018 : Debug : softfail = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : staple { Thu Dec 6 10:40:16 2018 : Debug : enable = no Thu Dec 6 10:40:16 2018 : Debug : override_cert_url = no Thu Dec 6 10:40:16 2018 : Debug : use_nonce = yes Thu Dec 6 10:40:16 2018 : Debug : timeout = 0 Thu Dec 6 10:40:16 2018 : Debug : softfail = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "invalid" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "linelog" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "log_accounting" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "logintime" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "mac2ip" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "mschap" Thu Dec 6 10:40:16 2018 : Debug : mschap: using internal authentication Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "noop" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "notfound" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "ok" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "pam" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "post_proxy_log" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "pre_proxy_log" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "radius" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "redis" Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Initialising connection pool Thu Dec 6 10:40:16 2018 : Debug : pool { Thu Dec 6 10:40:16 2018 : Debug : start = 4 Thu Dec 6 10:40:16 2018 : Debug : min = 1 Thu Dec 6 10:40:16 2018 : Debug : max = 4 Thu Dec 6 10:40:16 2018 : Debug : max_pending = 0 Thu Dec 6 10:40:16 2018 : Debug : spare = 1 Thu Dec 6 10:40:16 2018 : Debug : uses = 0 Thu Dec 6 10:40:16 2018 : Debug : lifetime = 86400 Thu Dec 6 10:40:16 2018 : Debug : cleanup_interval = 300 Thu Dec 6 10:40:16 2018 : Debug : idle_timeout = 600 Thu Dec 6 10:40:16 2018 : Debug : connect_timeout = 3.000000 Thu Dec 6 10:40:16 2018 : Debug : held_trigger_min = 0.000000 Thu Dec 6 10:40:16 2018 : Debug : held_trigger_max = 0.500000 Thu Dec 6 10:40:16 2018 : Debug : retry_delay = 30 Thu Dec 6 10:40:16 2018 : Debug : spread = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (0), 1 of 4 pending slots used Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (1), 1 of 3 pending slots used Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (2), 1 of 2 pending slots used Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (3), 1 of 1 pending slots used Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Reserved connection (3) Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis): Bootstrap server "10.43.16.224" returned: ERR This instance has cluster support disabled Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Released connection (3) Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "redis_ippool" Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Initialising connection pool Thu Dec 6 10:40:16 2018 : Debug : pool { Thu Dec 6 10:40:16 2018 : Debug : start = 0 Thu Dec 6 10:40:16 2018 : Debug : min = 4 Thu Dec 6 10:40:16 2018 : Debug : max = 4 Thu Dec 6 10:40:16 2018 : Debug : max_pending = 0 Thu Dec 6 10:40:16 2018 : Debug : spare = 1 Thu Dec 6 10:40:16 2018 : Debug : uses = 0 Thu Dec 6 10:40:16 2018 : Debug : lifetime = 0 Thu Dec 6 10:40:16 2018 : Debug : cleanup_interval = 30 Thu Dec 6 10:40:16 2018 : Debug : idle_timeout = 60 Thu Dec 6 10:40:16 2018 : Debug : connect_timeout = 3.000000 Thu Dec 6 10:40:16 2018 : Debug : held_trigger_min = 0.000000 Thu Dec 6 10:40:16 2018 : Debug : held_trigger_max = 0.500000 Thu Dec 6 10:40:16 2018 : Debug : retry_delay = 30 Thu Dec 6 10:40:16 2018 : Debug : spread = no Thu Dec 6 10:40:16 2018 : Debug : } Thu Dec 6 10:40:16 2018 : Warn : rlm_redis (redis) [1] - Ignoring "spare = 1", forcing to "spare = 0" Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - 0 of 0 connections in use. You may need to increase "spare" Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (0), 1 of 4 pending slots used Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Reserved connection (0) Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Released connection (0) Thu Dec 6 10:40:16 2018 : Info : rlm_redis (redis) [1] - Need 3 more connections to reach min connections (4) Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1] - Opening additional connection (1), 1 of 3 pending slots used Thu Dec 6 10:40:16 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "reject" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "reply_log" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "stats" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "updated" Thu Dec 6 10:40:16 2018 : Debug : Instantiating module "userlock" Thu Dec 6 10:40:16 2018 : Debug : [1] radius - Connection initialising Thu Dec 6 10:40:16 2018 : Debug : [1] radius - Connection initialised Thu Dec 6 10:40:16 2018 : Debug : Scheduler created in single-threaded mode Thu Dec 6 10:40:16 2018 : Debug : #### Opening listener interfaces #### Thu Dec 6 10:40:16 2018 : Debug : Listening on dhcpv4 address proto_dhcpv4_udp server 10.43.18.92 port 67 bound to virtual s erver dhcp Thu Dec 6 10:40:16 2018 : Debug : Waking up in 4.9 seconds. Thu Dec 6 10:40:16 2018 : Debug : radius - Connection open - proto udp local 0.0.0.0 port 44239 remote 127.0.0.1 port 1812 Thu Dec 6 10:40:16 2018 : Debug : radius - Allocated Status-Server ID 0 for status checks on connection proto udp local 0.0. 0.0 port 44239 remote 127.0.0.1 port 1812 Thu Dec 6 10:40:16 2018 : Debug : radius - Setting idle timeout to +5.000000 for connection proto udp local 0.0.0.0 port 442 39 remote 127.0.0.1 port 1812 Thu Dec 6 10:40:16 2018 : Debug : [1] radius - Connection established Thu Dec 6 10:40:16 2018 : Debug : Waking up in 4.9 seconds. Thu Dec 6 10:40:16 2018 : Debug : Waking up in 4.9 seconds. Thu Dec 6 10:40:19 2018 : Debug : proto_dhcpv4_udp - Received DHCP-Discover XID 00000000 length 304 proto_dhcpv4_udp server 10.43.18.92 port 67 Thu Dec 6 10:40:19 2018 : Debug : Network received packet size 304 Thu Dec 6 10:40:19 2018 : Debug : Resetting worker 30 cleanup timer to +0s Thu Dec 6 10:40:19 2018 : Debug : (0) running request (0) Thu Dec 6 10:40:19 2018 : Debug : Received DHCP-Discover XID 00000000 from 127.0.0.1:67 to 10.43.18.92:67 via lo (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Opcode = Client-Message (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Hardware-Type = Ethernet (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Hardware-Address-Length = 6 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Hop-Count = 1 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Transaction-Id = 0 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Number-of-Seconds = 0 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Flags = 0 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Client-IP-Address = 127.0.0.1 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Your-IP-Address = 0.0.0.0 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Server-IP-Address = 0.0.0.0 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Gateway-IP-Address = 127.0.0.1 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Client-Hardware-Address = 00:a0:bc:00:00:01 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Message-Type = DHCP-Discover (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Subnet-Mask (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Broadcast-Address (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Time-Offset (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Router-Address (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Domain-Name (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Domain-Name-Server (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Hostname (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Subscriber-Id = "00a0bc000001(a)aut.res.viasat.com" (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Relay-Remote-Id = 0x00a0bc000001 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Relay-Circuit-Id = 0x000000222066 (0) Thu Dec 6 10:40:19 2018 : Debug : Running 'recv DHCP-Discover' from file /usr/local/etc/raddb/sites-enabled/dhcp (0) Thu Dec 6 10:40:19 2018 : Debug : recv DHCP-Discover { (0) Thu Dec 6 10:40:19 2018 : Debug : update reply { (0) Thu Dec 6 10:40:19 2018 : Debug : DHCP-Message-Type = DHCP-Offer (0) Thu Dec 6 10:40:19 2018 : Debug : } # update reply (noop) (0) Thu Dec 6 10:40:19 2018 : Debug : update reply { (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Subnet-Mask = 255.255.255.0 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Router-Address = 10.43.18.92 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-IP-Address-Lease-Time = 900 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 (0) Thu Dec 6 10:40:19 2018 : Debug : } # update reply (noop) (0) Thu Dec 6 10:40:19 2018 : Debug : update control { (0) Thu Dec 6 10:40:19 2018 : Debug : &Pool-Name := "local" (0) Thu Dec 6 10:40:19 2018 : Debug : } # update control (noop) (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - Allocating lease from pool "local", to "00:a0:bc:00:00:01", expires in 900s (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - Reserved connection (1) (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - [1] >>> Sending command(s) to 10.43.16.224:6379 (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - [1] <<< Returned: success (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - Released connection (1) (0) Thu Dec 6 10:40:19 2018 : Info : redis_ippool - Need 2 more connections to reach min connections (4) (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - Opening additional connection (2), 1 of 2 pending slots used Thu Dec 6 10:40:19 2018 : Debug : rlm_redis (redis) [1]: Connecting node to 10.43.16.224:6379 (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - &reply:DHCP-Your-IP-Address := 192.168.24.111 (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - &reply:DHCP-IP-Address-Lease-Time := 802 (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - IP address lease allocated (0) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool (updated) (0) Thu Dec 6 10:40:19 2018 : Debug : ok (ok) (0) Thu Dec 6 10:40:19 2018 : Debug : } # recv DHCP-Discover (updated) (0) Thu Dec 6 10:40:19 2018 : Debug : Sent DHCP-Offer XID 00000000 from 10.43.18.92:67 to 127.0.0.1:67 via lo (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Message-Type = DHCP-Offer (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Subnet-Mask = 255.255.255.0 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Router-Address = 10.43.18.92 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-IP-Address-Lease-Time := 802 (0) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 Thu Dec 6 10:40:19 2018 : Debug : (0) done request Thu Dec 6 10:40:19 2018 : Debug : (0) finished request. Thu Dec 6 10:40:19 2018 : Debug : Waking up in 1.9 seconds. Thu Dec 6 10:40:19 2018 : Debug : Reply will be unicast to CIADDR from original packet. Thu Dec 6 10:40:19 2018 : Debug : proto_dhcpv4_udp - cleaning up ID 1 Thu Dec 6 10:40:19 2018 : Debug : Waking up in 1.9 seconds. Thu Dec 6 10:40:19 2018 : Debug : proto_dhcpv4_udp - Received DHCP-Request XID 00000000 length 325 proto_dhcpv4_udp server 1 0.43.18.92 port 67 Thu Dec 6 10:40:19 2018 : Debug : Network received packet size 325 Thu Dec 6 10:40:19 2018 : Debug : Resetting worker 30 cleanup timer to +0s Thu Dec 6 10:40:19 2018 : Debug : (1) running request (1) Thu Dec 6 10:40:19 2018 : Debug : Received DHCP-Request XID 00000000 from 127.0.0.1:67 to 10.43.18.92:67 via lo (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Opcode = Client-Message (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Hardware-Type = Ethernet (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Hardware-Address-Length = 6 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Hop-Count = 1 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Transaction-Id = 0 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Number-of-Seconds = 0 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Flags = 0 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Client-IP-Address = 127.0.0.1 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Your-IP-Address = 0.0.0.0 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Server-IP-Address = 0.0.0.0 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Gateway-IP-Address = 127.0.0.1 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Client-Hardware-Address = 00:a0:bc:00:00:01 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Requested-IP-Address = 192.168.24.111 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Message-Type = DHCP-Request (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Subnet-Mask (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Broadcast-Address (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Time-Offset (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Router-Address (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Domain-Name (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Domain-Name-Server (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Parameter-Request-List = DHCP-Hostname (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Client-Identifier = 0x01afac00000000 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Subscriber-Id = "00a0bc000001(a)aut.res.viasat.com" (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Relay-Remote-Id = 0x00a0bc000001 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Relay-Circuit-Id = 0x000000222066 (1) Thu Dec 6 10:40:19 2018 : Debug : Running 'recv DHCP-Request' from file /usr/local/etc/raddb/sites-enabled/dhcp (1) Thu Dec 6 10:40:19 2018 : Debug : recv DHCP-Request { (1) Thu Dec 6 10:40:19 2018 : Debug : update reply { (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Message-Type = DHCP-Ack (1) Thu Dec 6 10:40:19 2018 : Debug : } # update reply (noop) (1) Thu Dec 6 10:40:19 2018 : Debug : update reply { (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Subnet-Mask = 255.255.255.0 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Router-Address = 10.43.18.92 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-IP-Address-Lease-Time = 900 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 (1) Thu Dec 6 10:40:19 2018 : Debug : } # update reply (noop) (1) Thu Dec 6 10:40:19 2018 : Debug : if ("%{redis: EXISTS {local\}:pool}" == 1) { (1) Thu Dec 6 10:40:19 2018 : Debug : EXPAND %{redis: EXISTS {local\}:pool} (1) Thu Dec 6 10:40:19 2018 : Debug : Reserved connection (3) (1) Thu Dec 6 10:40:19 2018 : Debug : [1] >>> Sending command(s) to 10.43.16.224:6379 (1) Thu Dec 6 10:40:19 2018 : Debug : Executing command: EXISTS (1) Thu Dec 6 10:40:19 2018 : Debug : With arguments (1) Thu Dec 6 10:40:19 2018 : Debug : [1] {local\}:pool (1) Thu Dec 6 10:40:19 2018 : Debug : [1] <<< Returned: success (1) Thu Dec 6 10:40:19 2018 : Debug : Released connection (3) (1) Thu Dec 6 10:40:19 2018 : Debug : --> 0 (1) Thu Dec 6 10:40:19 2018 : Debug : ... (1) Thu Dec 6 10:40:19 2018 : Debug : } (1) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool - Pool attribute not present in request. Doing nothing (1) Thu Dec 6 10:40:19 2018 : Debug : redis_ippool (noop) (1) Thu Dec 6 10:40:19 2018 : Debug : if (updated) { (1) Thu Dec 6 10:40:19 2018 : Debug : ... (1) Thu Dec 6 10:40:19 2018 : Debug : } (1) Thu Dec 6 10:40:19 2018 : Debug : ok (ok) (1) Thu Dec 6 10:40:19 2018 : Debug : } # recv DHCP-Request (ok) (1) Thu Dec 6 10:40:19 2018 : ERROR : DHCP-Ack packet does not have YIADDR. The client will not receive an IP address. (1) Thu Dec 6 10:40:19 2018 : Debug : Sent DHCP-Ack XID 00000000 from 10.43.18.92:67 to 127.0.0.1:67 via lo (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Message-Type = DHCP-Ack (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Subnet-Mask = 255.255.255.0 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-Router-Address = 10.43.18.92 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-IP-Address-Lease-Time = 900 (1) Thu Dec 6 10:40:19 2018 : Debug : &DHCP-DHCP-Server-Identifier = 10.43.18.92 Thu Dec 6 10:40:19 2018 : Debug : (1) done request Thu Dec 6 10:40:19 2018 : Debug : (1) finished request. Thu Dec 6 10:40:19 2018 : Debug : Waking up in 1.9 seconds. Thu Dec 6 10:40:19 2018 : Debug : Reply will be unicast to CIADDR from original packet. Thu Dec 6 10:40:19 2018 : Debug : proto_dhcpv4_udp - cleaning up ID 1 Thu Dec 6 10:40:19 2018 : Debug : Waking up in 1.9 seconds. Thu Dec 6 10:40:21 2018 : Debug : radius - Idle timeout for connection proto udp local 0.0.0.0 port 44239 remote 127.0.0.1 p ort 1812 Thu Dec 6 10:40:21 2018 : Debug : [1] radius - Closing connection (18) Thu Dec 6 10:40:21 2018 : Debug : radius - Connection closed - proto udp local 0.0.0.0 port 44239 remote 127.0.0.1 port 1812 Thu Dec 6 10:40:21 2018 : Info : Ready to process requests Thu Dec 6 10:40:22 2018 : Info : Ready to process requests Thu Dec 6 10:40:22 2018 : Info : Signalled to terminate Thu Dec 6 10:40:22 2018 : Info : Exiting normally Regards, Nagamani Chinnapaiyan

1 0

Enabling NTLM causes the daemon not to start...
by WAGHORN, Jason (NHS BORDERS) 06 Dec '18

06 Dec '18

Hello all Running FreeRadius 3.0.17 here successfully for a "visited only" eduroam service. All working exactly as expected. Now have the opportunity for a "full-service" govroam service. The visited part is simple - a retread of the eduroam service - for simplicity and support purposes this is running on a separate (virtual) server to the eduroam service, so there is no config conflict/showthrough at all. I've started from scratch and have followed the guide for a "very basic (but functional) eduroam configuration" at https://wiki.freeradius.org/guide/eduroam making the required changes for govroam (so all instances of eduroam are replaced with govroam, server names are changed, shared secrets etc) When I attempt to launch radiusd, it bombs out with the following error "/etc/raddb/sites-enabled/inner-tunnel[59]: Errors parsing pap sub-section." The authenticate section is this: authenticate { inner-eap mschap #pap # Comment pap, and uncomment the stanza below if you're using # Active Directory this will allow it to work with EAP-TTLS-PAP. pap { ntlm_auth } } If I comment out the pap stanza and reinstate the "pap" line - it launches, but with the side effect that AD authentication isn't working (although that could easily be something else entirely :)) Any pointers most welcome - because I cannot for the life of me see what might be wrong (and I'm a newbie at trying to decipher radius debug output) radius -X output below Thanks Jason --------8<--------8<--------8<--------8<--------8<--------8<--------8<--------8<--------8<--------8<--------8<-------- [root@govradius raddb]# radiusd -X FreeRADIUS Version 3.0.17 Copyright (C) 1999-2017 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary including dictionary file /usr/share/freeradius/dictionary.dhcp including dictionary file /usr/share/freeradius/dictionary.vqp including dictionary file /etc/raddb/dictionary including configuration file /etc/raddb/radiusd.conf including configuration file /etc/raddb/proxy.conf including configuration file /etc/raddb/clients.conf including files in directory /etc/raddb/mods-enabled/ including configuration file /etc/raddb/mods-enabled/always including configuration file /etc/raddb/mods-enabled/attr_filter including configuration file /etc/raddb/mods-enabled/cache_eap including configuration file /etc/raddb/mods-enabled/chap including configuration file /etc/raddb/mods-enabled/date including configuration file /etc/raddb/mods-enabled/detail including configuration file /etc/raddb/mods-enabled/detail.log including configuration file /etc/raddb/mods-enabled/digest including configuration file /etc/raddb/mods-enabled/dynamic_clients including configuration file /etc/raddb/mods-enabled/eap including configuration file /etc/raddb/mods-enabled/echo including configuration file /etc/raddb/mods-enabled/exec including configuration file /etc/raddb/mods-enabled/expiration including configuration file /etc/raddb/mods-enabled/expr including configuration file /etc/raddb/mods-enabled/files including configuration file /etc/raddb/mods-enabled/linelog including configuration file /etc/raddb/mods-enabled/logintime including configuration file /etc/raddb/mods-enabled/mschap including configuration file /etc/raddb/mods-enabled/ntlm_auth including configuration file /etc/raddb/mods-enabled/pap including configuration file /etc/raddb/mods-enabled/passwd including configuration file /etc/raddb/mods-enabled/preprocess including configuration file /etc/raddb/mods-enabled/radutmp including configuration file /etc/raddb/mods-enabled/realm including configuration file /etc/raddb/mods-enabled/replicate including configuration file /etc/raddb/mods-enabled/soh including configuration file /etc/raddb/mods-enabled/sradutmp including configuration file /etc/raddb/mods-enabled/unix including configuration file /etc/raddb/mods-enabled/unpack including configuration file /etc/raddb/mods-enabled/utf8 including configuration file /etc/raddb/mods-enabled/inner-eap including files in directory /etc/raddb/policy.d/ including configuration file /etc/raddb/policy.d/abfab-tr including configuration file /etc/raddb/policy.d/accounting including configuration file /etc/raddb/policy.d/canonicalization including configuration file /etc/raddb/policy.d/control including configuration file /etc/raddb/policy.d/cui including configuration file /etc/raddb/policy.d/debug including configuration file /etc/raddb/policy.d/dhcp including configuration file /etc/raddb/policy.d/eap including configuration file /etc/raddb/policy.d/filter including configuration file /etc/raddb/policy.d/moonshot-targeted-ids including configuration file /etc/raddb/policy.d/operator-name including files in directory /etc/raddb/sites-enabled/ including configuration file /etc/raddb/sites-enabled/default including configuration file /etc/raddb/sites-enabled/inner-tunnel main { security { allow_core_dumps = no } name = "radiusd" prefix = "/usr" localstatedir = "/var" logdir = "/var/log/radius" run_dir = "/var/run/radiusd" } main { name = "radiusd" prefix = "/usr" localstatedir = "/var" sbindir = "/usr/sbin" logdir = "/var/log/radius" run_dir = "/var/run/radiusd" libdir = "/usr/lib64/freeradius" radacctdir = "/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 16384 pidfile = "/var/run/radiusd/radiusd.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no colourise = yes msg_denied = "You are already logged in - access denied" } resources { } security { max_attributes = 200 reject_delay = 1.000000 status_server = yes allow_vulnerable_openssl = "no" } } radiusd: #### Loading Realms and Home Servers #### home_server govroam_flr_server_1 { ipaddr = XXX.YYY.164.93 port = 1812 type = "auth+acct" secret = <<< secret >>> response_window = 30.000000 response_timeouts = 1 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_interval = 30 check_timeout = 4 num_answers_to_alive = 3 revive_interval = 300 limit { max_connections = 16 max_requests = 0 lifetime = 0 idle_timeout = 0 } coa { irt = 2 mrt = 16 mrc = 5 mrd = 30 } } home_server govroam_flr_server_2 { ipaddr = XXX.YYY.166.93 port = 1812 type = "auth+acct" secret = <<< secret >>> response_window = 30.000000 response_timeouts = 1 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_interval = 30 check_timeout = 4 num_answers_to_alive = 3 revive_interval = 300 limit { max_connections = 16 max_requests = 0 lifetime = 0 idle_timeout = 0 } coa { irt = 2 mrt = 16 mrc = 5 mrd = 30 } } home_server_pool govroam_flr_pool { type = keyed-balance home_server = govroam_flr_server_1 home_server = govroam_flr_server_2 } realm govroam_flr { auth_pool = govroam_flr_pool nostrip } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = <<< secret >>> limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } client govroam_flr_server_3 { ipaddr = XXX.YYY.164.92 require_message_authenticator = no secret = <<< secret >>> limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } client govroam_flr_server_4 { ipaddr = XXX.YYY.166.92 require_message_authenticator = no secret = <<< secret >>> limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } client ROOM1-WLC-001 { ipaddr = AAA.BBB.224.36 require_message_authenticator = no secret = <<< secret >>> shortname = "ROOM1-WLC-001" virtual_server = "govroam" limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } client ROOM2-WLC-002 { ipaddr = AAA.BBB.224.37 require_message_authenticator = no secret = <<< secret >>> shortname = "ROOM2-WLC-002" virtual_server = "govroam" limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } Debugger not attached # Creating Auth-Type = eap # Creating Auth-Type = inner-eap # Creating Auth-Type = mschap radiusd: #### Instantiating modules #### modules { # Loaded module rlm_always # Loading module "reject" from file /etc/raddb/mods-enabled/always always reject { rcode = "reject" simulcount = 0 mpp = no } # Loading module "fail" from file /etc/raddb/mods-enabled/always always fail { rcode = "fail" simulcount = 0 mpp = no } # Loading module "ok" from file /etc/raddb/mods-enabled/always always ok { rcode = "ok" simulcount = 0 mpp = no } # Loading module "handled" from file /etc/raddb/mods-enabled/always always handled { rcode = "handled" simulcount = 0 mpp = no } # Loading module "invalid" from file /etc/raddb/mods-enabled/always always invalid { rcode = "invalid" simulcount = 0 mpp = no } # Loading module "userlock" from file /etc/raddb/mods-enabled/always always userlock { rcode = "userlock" simulcount = 0 mpp = no } # Loading module "notfound" from file /etc/raddb/mods-enabled/always always notfound { rcode = "notfound" simulcount = 0 mpp = no } # Loading module "noop" from file /etc/raddb/mods-enabled/always always noop { rcode = "noop" simulcount = 0 mpp = no } # Loading module "updated" from file /etc/raddb/mods-enabled/always always updated { rcode = "updated" simulcount = 0 mpp = no } # Loaded module rlm_attr_filter # Loading module "attr_filter.post-proxy" from file /etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.post-proxy { filename = "/etc/raddb/mods-config/attr_filter/post-proxy" key = "%{Realm}" relaxed = no } # Loading module "attr_filter.pre-proxy" from file /etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.pre-proxy { filename = "/etc/raddb/mods-config/attr_filter/pre-proxy" key = "%{Realm}" relaxed = no } # Loading module "attr_filter.access_reject" from file /etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.access_reject { filename = "/etc/raddb/mods-config/attr_filter/access_reject" key = "%{User-Name}" relaxed = no } # Loading module "attr_filter.access_challenge" from file /etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.access_challenge { filename = "/etc/raddb/mods-config/attr_filter/access_challenge" key = "%{User-Name}" relaxed = no } # Loading module "attr_filter.accounting_response" from file /etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.accounting_response { filename = "/etc/raddb/mods-config/attr_filter/accounting_response" key = "%{User-Name}" relaxed = no } # Loaded module rlm_cache # Loading module "cache_eap" from file /etc/raddb/mods-enabled/cache_eap cache cache_eap { driver = "rlm_cache_rbtree" key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" ttl = 15 max_entries = 0 epoch = 0 add_stats = no } # Loaded module rlm_chap # Loading module "chap" from file /etc/raddb/mods-enabled/chap # Loaded module rlm_date # Loading module "date" from file /etc/raddb/mods-enabled/date date { format = "%b %e %Y %H:%M:%S %Z" utc = no } # Loaded module rlm_detail # Loading module "detail" from file /etc/raddb/mods-enabled/detail detail { filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loading module "auth_log" from file /etc/raddb/mods-enabled/detail.log detail auth_log { filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loading module "reply_log" from file /etc/raddb/mods-enabled/detail.log detail reply_log { filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loading module "pre_proxy_log" from file /etc/raddb/mods-enabled/detail.log detail pre_proxy_log { filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loading module "post_proxy_log" from file /etc/raddb/mods-enabled/detail.log detail post_proxy_log { filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loaded module rlm_digest # Loading module "digest" from file /etc/raddb/mods-enabled/digest # Loaded module rlm_dynamic_clients # Loading module "dynamic_clients" from file /etc/raddb/mods-enabled/dynamic_clients # Loaded module rlm_eap # Loading module "eap" from file /etc/raddb/mods-enabled/eap eap { default_eap_type = "ttls" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 16384 } # Loaded module rlm_exec # Loading module "echo" from file /etc/raddb/mods-enabled/echo exec echo { wait = yes program = "/bin/echo %{User-Name}" input_pairs = "request" output_pairs = "reply" shell_escape = yes } # Loading module "exec" from file /etc/raddb/mods-enabled/exec exec { wait = no input_pairs = "request" shell_escape = yes timeout = 10 } # Loaded module rlm_expiration # Loading module "expiration" from file /etc/raddb/mods-enabled/expiration # Loaded module rlm_expr # Loading module "expr" from file /etc/raddb/mods-enabled/expr expr { safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /Ã¤Ã©Ã¶Ã¼Ã Ã¢Ã¦Ã§Ã¨Ã©ÃªÃ«Ã®Ã¯Ã´Å“Ã¹Ã»Ã¼aÃ¿Ã„Ã‰Ã–ÃœÃŸÃ€Ã‚Ã†Ã‡ÃˆÃ‰ÃŠÃ‹ÃŽÃÃ”Å’Ã™Ã›ÃœÅ¸" } # Loaded module rlm_files # Loading module "files" from file /etc/raddb/mods-enabled/files files { filename = "/etc/raddb/mods-config/files/authorize" acctusersfile = "/etc/raddb/mods-config/files/accounting" preproxy_usersfile = "/etc/raddb/mods-config/files/pre-proxy" } # Loaded module rlm_linelog # Loading module "linelog_recv_request" from file /etc/raddb/mods-enabled/linelog linelog linelog_recv_request { filename = "syslog" escape_filenames = no syslog_facility = "local0" syslog_severity = "debug" permissions = 384 format = "action = Recv-Request, %{pairs:request:}" } # Loading module "linelog_send_accept" from file /etc/raddb/mods-enabled/linelog linelog linelog_send_accept { filename = "syslog" escape_filenames = no syslog_facility = "local0" syslog_severity = "debug" permissions = 384 format = "action = Send-Accept, %{pairs:request:}" } # Loading module "linelog_send_reject" from file /etc/raddb/mods-enabled/linelog linelog linelog_send_reject { filename = "syslog" escape_filenames = no syslog_facility = "local0" syslog_severity = "debug" permissions = 384 format = "action = Send-Reject, %{pairs:request:}" } # Loading module "linelog_send_proxy_request" from file /etc/raddb/mods-enabled/linelog linelog linelog_send_proxy_request { filename = "syslog" escape_filenames = no syslog_facility = "local0" syslog_severity = "debug" permissions = 384 format = "action = Send-Proxy-Request, %{pairs:proxy-request:}" } # Loading module "linelog_recv_proxy_response" from file /etc/raddb/mods-enabled/linelog linelog linelog_recv_proxy_response { filename = "syslog" escape_filenames = no syslog_facility = "local0" syslog_severity = "debug" permissions = 384 format = "action = Recv-Proxy-Response, %{pairs:proxy-reply:}" } # Loaded module rlm_logintime # Loading module "logintime" from file /etc/raddb/mods-enabled/logintime logintime { minimum_timeout = 60 } # Loaded module rlm_mschap # Loading module "mschap" from file /etc/raddb/mods-enabled/mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = yes ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --allow-mschapv2 --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}" passchange { } allow_retry = yes winbind_retry_with_normalised_username = no } # Loading module "ntlm_auth" from file /etc/raddb/mods-enabled/ntlm_auth exec ntlm_auth { wait = yes program = "/usr/bin/ntlm_auth --request-nt-key --allow-mschapv2 --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" shell_escape = yes } # Loaded module rlm_pap # Loading module "pap" from file /etc/raddb/mods-enabled/pap pap { normalise = yes } # Loaded module rlm_passwd # Loading module "etc_passwd" from file /etc/raddb/mods-enabled/passwd passwd etc_passwd { filename = "/etc/passwd" format = "*User-Name:Crypt-Password:" delimiter = ":" ignore_nislike = no ignore_empty = yes allow_multiple_keys = no hash_size = 100 } # Loaded module rlm_preprocess # Loading module "preprocess" from file /etc/raddb/mods-enabled/preprocess preprocess { huntgroups = "/etc/raddb/mods-config/preprocess/huntgroups" hints = "/etc/raddb/mods-config/preprocess/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } # Loaded module rlm_radutmp # Loading module "radutmp" from file /etc/raddb/mods-enabled/radutmp radutmp { filename = "/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes permissions = 384 caller_id = yes } # Loaded module rlm_realm # Loading module "IPASS" from file /etc/raddb/mods-enabled/realm realm IPASS { format = "prefix" delimiter = "/" ignore_default = no ignore_null = no } # Loading module "suffix" from file /etc/raddb/mods-enabled/realm realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } # Loading module "realmpercent" from file /etc/raddb/mods-enabled/realm realm realmpercent { format = "suffix" delimiter = "%" ignore_default = no ignore_null = no } # Loading module "ntdomain" from file /etc/raddb/mods-enabled/realm realm ntdomain { format = "prefix" delimiter = "\\" ignore_default = no ignore_null = no } # Loaded module rlm_replicate # Loading module "replicate" from file /etc/raddb/mods-enabled/replicate # Loaded module rlm_soh # Loading module "soh" from file /etc/raddb/mods-enabled/soh soh { dhcp = yes } # Loading module "sradutmp" from file /etc/raddb/mods-enabled/sradutmp radutmp sradutmp { filename = "/var/log/radius/sradutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes permissions = 420 caller_id = no } # Loaded module rlm_unix # Loading module "unix" from file /etc/raddb/mods-enabled/unix unix { radwtmp = "/var/log/radius/radwtmp" } Creating attribute Unix-Group # Loaded module rlm_unpack # Loading module "unpack" from file /etc/raddb/mods-enabled/unpack # Loaded module rlm_utf8 # Loading module "utf8" from file /etc/raddb/mods-enabled/utf8 # Loading module "inner-eap" from file /etc/raddb/mods-enabled/inner-eap eap inner-eap { default_eap_type = "mschapv2" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 16384 } instantiate { } # Instantiating module "reject" from file /etc/raddb/mods-enabled/always # Instantiating module "fail" from file /etc/raddb/mods-enabled/always # Instantiating module "ok" from file /etc/raddb/mods-enabled/always # Instantiating module "handled" from file /etc/raddb/mods-enabled/always # Instantiating module "invalid" from file /etc/raddb/mods-enabled/always # Instantiating module "userlock" from file /etc/raddb/mods-enabled/always # Instantiating module "notfound" from file /etc/raddb/mods-enabled/always # Instantiating module "noop" from file /etc/raddb/mods-enabled/always # Instantiating module "updated" from file /etc/raddb/mods-enabled/always # Instantiating module "attr_filter.post-proxy" from file /etc/raddb/mods-enabled/attr_filter reading pairlist file /etc/raddb/mods-config/attr_filter/post-proxy # Instantiating module "attr_filter.pre-proxy" from file /etc/raddb/mods-enabled/attr_filter reading pairlist file /etc/raddb/mods-config/attr_filter/pre-proxy # Instantiating module "attr_filter.access_reject" from file /etc/raddb/mods-enabled/attr_filter reading pairlist file /etc/raddb/mods-config/attr_filter/access_reject [/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay" found in filter list for realm "DEFAULT". [/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay-USec" found in filter list for realm "DEFAULT". # Instantiating module "attr_filter.access_challenge" from file /etc/raddb/mods-enabled/attr_filter reading pairlist file /etc/raddb/mods-config/attr_filter/access_challenge # Instantiating module "attr_filter.accounting_response" from file /etc/raddb/mods-enabled/attr_filter reading pairlist file /etc/raddb/mods-config/attr_filter/accounting_response # Instantiating module "cache_eap" from file /etc/raddb/mods-enabled/cache_eap rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked # Instantiating module "detail" from file /etc/raddb/mods-enabled/detail # Instantiating module "auth_log" from file /etc/raddb/mods-enabled/detail.log rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output # Instantiating module "reply_log" from file /etc/raddb/mods-enabled/detail.log # Instantiating module "pre_proxy_log" from file /etc/raddb/mods-enabled/detail.log # Instantiating module "post_proxy_log" from file /etc/raddb/mods-enabled/detail.log # Instantiating module "eap" from file /etc/raddb/mods-enabled/eap # Linked to sub-module rlm_eap_tls tls { tls = "tls-common" } tls-config tls-common { verify_depth = 0 pem_file_type = yes private_key_file = "/etc/raddb/certs/server.key" certificate_file = "/etc/raddb/certs/server.pem" ca_file = "/etc/raddb/certs/ca.pem" private_key_password = <<< secret >>> fragment_size = 1024 include_length = yes auto_chain = yes check_crl = no check_all_crl = no ecdh_curve = "prime256v1" tls_max_version = "" tls_min_version = "1.0" cache { enable = no lifetime = 24 max_entries = 255 } verify { skip_if_ocsp_ok = no } ocsp { enable = yes override_cert_url = no use_nonce = yes timeout = 0 softfail = no } } # Linked to sub-module rlm_eap_ttls ttls { tls = "tls-common" default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "govroam-inner" include_length = yes require_client_cert = no } tls: Using cached TLS configuration from previous invocation # Linked to sub-module rlm_eap_peap peap { tls = "tls-common" default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "govroam-inner" soh = no require_client_cert = no } tls: Using cached TLS configuration from previous invocation # Instantiating module "expiration" from file /etc/raddb/mods-enabled/expiration # Instantiating module "files" from file /etc/raddb/mods-enabled/files reading pairlist file /etc/raddb/mods-config/files/authorize reading pairlist file /etc/raddb/mods-config/files/accounting reading pairlist file /etc/raddb/mods-config/files/pre-proxy # Instantiating module "linelog_recv_request" from file /etc/raddb/mods-enabled/linelog # Instantiating module "linelog_send_accept" from file /etc/raddb/mods-enabled/linelog # Instantiating module "linelog_send_reject" from file /etc/raddb/mods-enabled/linelog # Instantiating module "linelog_send_proxy_request" from file /etc/raddb/mods-enabled/linelog # Instantiating module "linelog_recv_proxy_response" from file /etc/raddb/mods-enabled/linelog # Instantiating module "logintime" from file /etc/raddb/mods-enabled/logintime # Instantiating module "mschap" from file /etc/raddb/mods-enabled/mschap rlm_mschap (mschap): authenticating by calling 'ntlm_auth' # Instantiating module "pap" from file /etc/raddb/mods-enabled/pap # Instantiating module "etc_passwd" from file /etc/raddb/mods-enabled/passwd rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no # Instantiating module "preprocess" from file /etc/raddb/mods-enabled/preprocess reading pairlist file /etc/raddb/mods-config/preprocess/huntgroups reading pairlist file /etc/raddb/mods-config/preprocess/hints # Instantiating module "IPASS" from file /etc/raddb/mods-enabled/realm # Instantiating module "suffix" from file /etc/raddb/mods-enabled/realm # Instantiating module "realmpercent" from file /etc/raddb/mods-enabled/realm # Instantiating module "ntdomain" from file /etc/raddb/mods-enabled/realm # Instantiating module "inner-eap" from file /etc/raddb/mods-enabled/inner-eap # Linked to sub-module rlm_eap_mschapv2 mschapv2 { with_ntdomain_hack = yes send_error = yes } } # modules radiusd: #### Loading Virtual Servers #### server { # from file /etc/raddb/radiusd.conf } # server server govroam { # from file /etc/raddb/sites-enabled/default # Loading authenticate {...} # Loading authorize {...} # Loading pre-proxy {...} # Loading post-proxy {...} # Loading post-auth {...} } # server govroam server govroam-inner { # from file /etc/raddb/sites-enabled/inner-tunnel # Loading authenticate {...} /etc/raddb/sites-enabled/inner-tunnel[59]: Errors parsing pap sub-section. [root@govradius raddb]# ******************************************************************************************************************** This message may contain confidential information. If you are not the intended recipient please inform the sender that you have received the message in error before deleting it. Please do not disclose, copy or distribute information in this e-mail or take any action in relation to its contents. To do so is strictly prohibited and may be unlawful. Thank you for your co-operation. NHSmail is the secure email and directory service available for all NHS staff in England and Scotland. NHSmail is approved for exchanging patient data and other sensitive information with NHSmail and other accredited email services. For more information and to find out how you can switch, https://portal.nhs.net/help/joiningnhsmail

2 3