- Freeradius-Users - lists.freeradius.org

FreeRadius Authorizing and Authenticating Anyone if One User Logs in
by Lennon Mazonde 28 Mar '14

28 Mar '14

Hi Everyone, Newbie here. I am running freeradius administered via daloradius with coovachilli for my captive portal. My problem is that if one user logs in (via the captive portal), freeradius is granting access to any user. In other words, anyone who logs in after the first user doesn't get redirected to the captive portal, they simply gain (free) access. If any one user logs out of the session, again all the other users are logged out. I've looked at the freeradius debug output, but i can't see anything out of the ordinary, perhaps i'm not looking in the right places? Please help me :-( Output from freeradius -XXX: Thu Mar 27 21:33:31 2014 : Info: FreeRADIUS Version 2.1.10, for host x86_64-pc-l inux-gnu, built on Feb 24 2014 at 15:16:50 Thu Mar 27 21:33:31 2014 : Info: Copyright (C) 1999-2009 The FreeRADIUS server p roject and contributors. Thu Mar 27 21:33:31 2014 : Info: There is NO warranty; not even for MERCHANTABIL ITY or FITNESS FOR A Thu Mar 27 21:33:31 2014 : Info: PARTICULAR PURPOSE. Thu Mar 27 21:33:31 2014 : Info: You may redistribute copies of FreeRADIUS under the terms of the Thu Mar 27 21:33:31 2014 : Info: GNU General Public License v2. Thu Mar 27 21:33:31 2014 : Info: Starting - reading configuration files ... Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/r adiusd.conf Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/p roxy.conf Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/c lients.conf Thu Mar 27 21:33:31 2014 : Debug: including files in directory /etc/freeradius/m odules/ Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/exec Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/mac2ip Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/cui Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/detail.log Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/digest Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/files Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/counter Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/checkval Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/attr_filter Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/passwd Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/acct_unique Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/krb5 Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/sradutmp Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/chap Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/mschap Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/preprocess Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/ldap Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/ippool Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/opendirectory Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/inner-eap Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/logintime Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/mac2vlan Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/smsotp Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/sql_log Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/attr_rewrite Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/otp Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/wimax Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/linelog Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/pam Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/echo Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/pap Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/dynamic_clients Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/etc_group Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/policy Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/expiration Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/smbpasswd Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/perl Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/detail Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/realm Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/sqlcounter_expire_on_login Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/always Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/expr Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/unix Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/detail.example.com Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/ntlm_auth Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/m odules/radutmp Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/e ap.conf Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/s ql.conf Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/s ql/mysql/dialup.conf Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/s ql/mysql/counter.conf Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/p olicy.conf Thu Mar 27 21:33:31 2014 : Debug: including files in directory /etc/freeradius/s ites-enabled/ Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/s ites-enabled/inner-tunnel Thu Mar 27 21:33:31 2014 : Debug: including configuration file /etc/freeradius/s ites-enabled/default Thu Mar 27 21:33:31 2014 : Debug: main { Thu Mar 27 21:33:31 2014 : Debug: user = "freerad" Thu Mar 27 21:33:31 2014 : Debug: group = "freerad" Thu Mar 27 21:33:31 2014 : Debug: allow_core_dumps = no Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: including dictionary file /etc/freeradius/dict ionary Thu Mar 27 21:33:31 2014 : Debug: main { Thu Mar 27 21:33:31 2014 : Debug: prefix = "/usr" Thu Mar 27 21:33:31 2014 : Debug: localstatedir = "/var" Thu Mar 27 21:33:31 2014 : Debug: logdir = "/var/log/freeradius" Thu Mar 27 21:33:31 2014 : Debug: libdir = "/usr/lib/freeradius" Thu Mar 27 21:33:31 2014 : Debug: radacctdir = "/var/log/freeradius/radacc t" Thu Mar 27 21:33:31 2014 : Debug: hostname_lookups = no Thu Mar 27 21:33:31 2014 : Debug: max_request_time = 30 Thu Mar 27 21:33:31 2014 : Debug: cleanup_delay = 5 Thu Mar 27 21:33:31 2014 : Debug: max_requests = 1024 Thu Mar 27 21:33:31 2014 : Debug: pidfile = "/var/run/freeradius/freeradiu s.pid" Thu Mar 27 21:33:31 2014 : Debug: checkrad = "/usr/sbin/checkrad" Thu Mar 27 21:33:31 2014 : Debug: debug_level = 0 Thu Mar 27 21:33:31 2014 : Debug: proxy_requests = yes Thu Mar 27 21:33:31 2014 : Debug: log { Thu Mar 27 21:33:31 2014 : Debug: stripped_names = no Thu Mar 27 21:33:31 2014 : Debug: auth = no Thu Mar 27 21:33:31 2014 : Debug: auth_badpass = no Thu Mar 27 21:33:31 2014 : Debug: auth_goodpass = no Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: security { Thu Mar 27 21:33:31 2014 : Debug: max_attributes = 200 Thu Mar 27 21:33:31 2014 : Debug: reject_delay = 1 Thu Mar 27 21:33:31 2014 : Debug: status_server = yes Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: radiusd: #### Loading Realms and Home Servers #### Thu Mar 27 21:33:31 2014 : Debug: proxy server { Thu Mar 27 21:33:31 2014 : Debug: retry_delay = 5 Thu Mar 27 21:33:31 2014 : Debug: retry_count = 3 Thu Mar 27 21:33:31 2014 : Debug: default_fallback = no Thu Mar 27 21:33:31 2014 : Debug: dead_time = 120 Thu Mar 27 21:33:31 2014 : Debug: wake_all_if_all_dead = no Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: home_server localhost { Thu Mar 27 21:33:31 2014 : Debug: ipaddr = 127.0.0.1 Thu Mar 27 21:33:31 2014 : Debug: port = 1812 Thu Mar 27 21:33:31 2014 : Debug: type = "auth" Thu Mar 27 21:33:31 2014 : Debug: secret = "testing123" Thu Mar 27 21:33:31 2014 : Debug: response_window = 20 Thu Mar 27 21:33:31 2014 : Debug: max_outstanding = 65536 Thu Mar 27 21:33:31 2014 : Debug: require_message_authenticator = yes Thu Mar 27 21:33:31 2014 : Debug: zombie_period = 40 Thu Mar 27 21:33:31 2014 : Debug: status_check = "status-server" Thu Mar 27 21:33:31 2014 : Debug: ping_interval = 30 Thu Mar 27 21:33:31 2014 : Debug: check_interval = 30 Thu Mar 27 21:33:31 2014 : Debug: num_answers_to_alive = 3 Thu Mar 27 21:33:31 2014 : Debug: num_pings_to_alive = 3 Thu Mar 27 21:33:31 2014 : Debug: revive_interval = 120 Thu Mar 27 21:33:31 2014 : Debug: status_check_timeout = 4 Thu Mar 27 21:33:31 2014 : Debug: irt = 2 Thu Mar 27 21:33:31 2014 : Debug: mrt = 16 Thu Mar 27 21:33:31 2014 : Debug: mrc = 5 Thu Mar 27 21:33:31 2014 : Debug: mrd = 30 Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: home_server_pool my_auth_failover { Thu Mar 27 21:33:31 2014 : Debug: type = fail-over Thu Mar 27 21:33:31 2014 : Debug: home_server = localhost Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: realm example.com { Thu Mar 27 21:33:31 2014 : Debug: auth_pool = my_auth_failover Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: realm LOCAL { Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: radiusd: #### Loading Clients #### Thu Mar 27 21:33:31 2014 : Debug: client localhost { Thu Mar 27 21:33:31 2014 : Debug: ipaddr = 127.0.0.1 Thu Mar 27 21:33:31 2014 : Debug: require_message_authenticator = no Thu Mar 27 21:33:31 2014 : Debug: secret = "testing123" Thu Mar 27 21:33:31 2014 : Debug: nastype = "other" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: radiusd: #### Instantiating modules #### Thu Mar 27 21:33:31 2014 : Debug: instantiate { Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_exec, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_exec Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "exec" from file /etc/freeradius/modules/exec Thu Mar 27 21:33:31 2014 : Debug: exec { Thu Mar 27 21:33:31 2014 : Debug: wait = no Thu Mar 27 21:33:31 2014 : Debug: input_pairs = "request" Thu Mar 27 21:33:31 2014 : Debug: shell_escape = yes Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_expr, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_expr Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "expr" from file /etc/freeradius/modules/expr Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_expiration, checking if it's v alid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_expiration Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "expiration" fro m file /etc/freeradius/modules/expiration Thu Mar 27 21:33:31 2014 : Debug: expiration { Thu Mar 27 21:33:31 2014 : Debug: reply-message = "Password Has Expired " Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_logintime, checking if it's va lid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_logintime Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "logintime" from file /etc/freeradius/modules/logintime Thu Mar 27 21:33:31 2014 : Debug: logintime { Thu Mar 27 21:33:31 2014 : Debug: reply-message = "You are calling outside your allowed timespan " Thu Mar 27 21:33:31 2014 : Debug: minimum-timeout = 60 Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_sqlcounter, checking if it's v alid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_sqlcounter Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "chillispot_max_ bytes" from file /etc/freeradius/sql/mysql/counter.conf Thu Mar 27 21:33:31 2014 : Debug: sqlcounter chillispot_max_bytes { Thu Mar 27 21:33:31 2014 : Debug: counter-name = "ChilliSpot-Max-Total-Oct ets" Thu Mar 27 21:33:31 2014 : Debug: check-name = "ChilliSpot-Max-Total-Octet s" Thu Mar 27 21:33:31 2014 : Debug: reply-name = "ChilliSpot-Max-Total-Octet s" Thu Mar 27 21:33:31 2014 : Debug: key = "User-Name" Thu Mar 27 21:33:31 2014 : Debug: sqlmod-inst = "sql" Thu Mar 27 21:33:31 2014 : Debug: query = "SELECT SUM(AcctInputOctets) + S UM(AcctOutputOctets) FROM radacct WHERE UserName='%{%k'" Thu Mar 27 21:33:31 2014 : Debug: reset = "never" Thu Mar 27 21:33:31 2014 : Debug: safe-characters = "@abcdefghijklmnopqrst uvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Reply attribute ChilliSpot-Max -Total-Octets is number 954138627 Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Counter attribute ChilliSpot-M ax-Total-Octets is number 954138627 Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Check attribute ChilliSpot-Max -Total-Octets is number 954138627 Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Current Time: 1395948811 [2014 -03-27 21:33:31], Next reset 0 [2014-03-27 21:00:00] Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Current Time: 1395948811 [2014 -03-27 21:33:31], Prev reset 0 [2014-03-27 21:00:00] Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "noresetcounter" from file /etc/freeradius/sql/mysql/counter.conf Thu Mar 27 21:33:31 2014 : Debug: sqlcounter noresetcounter { Thu Mar 27 21:33:31 2014 : Debug: counter-name = "Max-All-Session-Time" Thu Mar 27 21:33:31 2014 : Debug: check-name = "Max-All-Session" Thu Mar 27 21:33:31 2014 : Debug: key = "User-Name" Thu Mar 27 21:33:31 2014 : Debug: sqlmod-inst = "sql" Thu Mar 27 21:33:31 2014 : Debug: query = "SELECT IFNULL(SUM(AcctSessionTi me),0) FROM radacct WHERE UserName='%{%k}'" Thu Mar 27 21:33:31 2014 : Debug: reset = "never" Thu Mar 27 21:33:31 2014 : Debug: safe-characters = "@abcdefghijklmnopqrst uvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Reply attribute set to Session -Timeout. Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Counter attribute Max-All-Sess ion-Time is number 11273 Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Check attribute Max-All-Sessio n is number 11274 Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Current Time: 1395948811 [2014 -03-27 21:33:31], Next reset 0 [2014-03-27 21:00:00] Thu Mar 27 21:33:31 2014 : Debug: rlm_sqlcounter: Current Time: 1395948811 [2014 -03-27 21:33:31], Prev reset 0 [2014-03-27 21:00:00] Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: radiusd: #### Loading Virtual Servers #### Thu Mar 27 21:33:31 2014 : Debug: server inner-tunnel { # from file /etc/freerad ius/sites-enabled/inner-tunnel Thu Mar 27 21:33:31 2014 : Debug: modules { Thu Mar 27 21:33:31 2014 : Debug: Module: Checking authenticate {...} for more modules to load Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_pap, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_pap Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "pap" from file /etc/freeradius/modules/pap Thu Mar 27 21:33:31 2014 : Debug: pap { Thu Mar 27 21:33:31 2014 : Debug: encryption_scheme = "auto" Thu Mar 27 21:33:31 2014 : Debug: auto_header = no Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_chap, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_chap Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "chap" from file /etc/freeradius/modules/chap Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_mschap, checking if it's valid ) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_mschap Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "mschap" from fi le /etc/freeradius/modules/mschap Thu Mar 27 21:33:31 2014 : Debug: mschap { Thu Mar 27 21:33:31 2014 : Debug: use_mppe = yes Thu Mar 27 21:33:31 2014 : Debug: require_encryption = no Thu Mar 27 21:33:31 2014 : Debug: require_strong = no Thu Mar 27 21:33:31 2014 : Debug: with_ntdomain_hack = no Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_unix, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_unix Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "unix" from file /etc/freeradius/modules/unix Thu Mar 27 21:33:31 2014 : Debug: unix { Thu Mar 27 21:33:31 2014 : Debug: radwtmp = "/var/log/freeradius/radwtmp" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_eap, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_eap Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "eap" from file /etc/freeradius/eap.conf Thu Mar 27 21:33:31 2014 : Debug: eap { Thu Mar 27 21:33:31 2014 : Debug: default_eap_type = "md5" Thu Mar 27 21:33:31 2014 : Debug: timer_expire = 60 Thu Mar 27 21:33:31 2014 : Debug: ignore_unknown_eap_types = no Thu Mar 27 21:33:31 2014 : Debug: cisco_accounting_username_bug = no Thu Mar 27 21:33:31 2014 : Debug: max_sessions = 4096 Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to sub-module rlm_eap_md5 Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating eap-md5 Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to sub-module rlm_eap_leap Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating eap-leap Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to sub-module rlm_eap_gtc Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating eap-gtc Thu Mar 27 21:33:31 2014 : Debug: gtc { Thu Mar 27 21:33:31 2014 : Debug: challenge = "Password: " Thu Mar 27 21:33:31 2014 : Debug: auth_type = "PAP" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to sub-module rlm_eap_tls Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating eap-tls Thu Mar 27 21:33:31 2014 : Debug: tls { Thu Mar 27 21:33:31 2014 : Debug: rsa_key_exchange = no Thu Mar 27 21:33:31 2014 : Debug: dh_key_exchange = yes Thu Mar 27 21:33:31 2014 : Debug: rsa_key_length = 512 Thu Mar 27 21:33:31 2014 : Debug: dh_key_length = 512 Thu Mar 27 21:33:31 2014 : Debug: verify_depth = 0 Thu Mar 27 21:33:31 2014 : Debug: CA_path = "/etc/freeradius/certs" Thu Mar 27 21:33:31 2014 : Debug: pem_file_type = yes Thu Mar 27 21:33:31 2014 : Debug: private_key_file = "/etc/freeradius/cert s/server.key" Thu Mar 27 21:33:31 2014 : Debug: certificate_file = "/etc/freeradius/cert s/server.pem" Thu Mar 27 21:33:31 2014 : Debug: CA_file = "/etc/freeradius/certs/ca.pem" Thu Mar 27 21:33:31 2014 : Debug: private_key_password = "whatever" Thu Mar 27 21:33:31 2014 : Debug: dh_file = "/etc/freeradius/certs/dh" Thu Mar 27 21:33:31 2014 : Debug: random_file = "/dev/urandom" Thu Mar 27 21:33:31 2014 : Debug: fragment_size = 1024 Thu Mar 27 21:33:31 2014 : Debug: include_length = yes Thu Mar 27 21:33:31 2014 : Debug: check_crl = no Thu Mar 27 21:33:31 2014 : Debug: cipher_list = "DEFAULT" Thu Mar 27 21:33:31 2014 : Debug: make_cert_command = "/etc/freeradius/cer ts/bootstrap" Thu Mar 27 21:33:31 2014 : Debug: cache { Thu Mar 27 21:33:31 2014 : Debug: enable = no Thu Mar 27 21:33:31 2014 : Debug: lifetime = 24 Thu Mar 27 21:33:31 2014 : Debug: max_entries = 255 Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: verify { Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to sub-module rlm_eap_ttls Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating eap-ttls Thu Mar 27 21:33:31 2014 : Debug: ttls { Thu Mar 27 21:33:31 2014 : Debug: default_eap_type = "md5" Thu Mar 27 21:33:31 2014 : Debug: copy_request_to_tunnel = no Thu Mar 27 21:33:31 2014 : Debug: use_tunneled_reply = no Thu Mar 27 21:33:31 2014 : Debug: virtual_server = "inner-tunnel" Thu Mar 27 21:33:31 2014 : Debug: include_length = yes Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to sub-module rlm_eap_peap Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating eap-peap Thu Mar 27 21:33:31 2014 : Debug: peap { Thu Mar 27 21:33:31 2014 : Debug: default_eap_type = "mschapv2" Thu Mar 27 21:33:31 2014 : Debug: copy_request_to_tunnel = no Thu Mar 27 21:33:31 2014 : Debug: use_tunneled_reply = no Thu Mar 27 21:33:31 2014 : Debug: proxy_tunneled_request_as_eap = yes Thu Mar 27 21:33:31 2014 : Debug: virtual_server = "inner-tunnel" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to sub-module rlm_eap_mschapv2 Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating eap-mschapv2 Thu Mar 27 21:33:31 2014 : Debug: mschapv2 { Thu Mar 27 21:33:31 2014 : Debug: with_ntdomain_hack = no Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Checking authorize {...} for more mod ules to load Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_realm, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_realm Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "suffix" from fi le /etc/freeradius/modules/realm Thu Mar 27 21:33:31 2014 : Debug: realm suffix { Thu Mar 27 21:33:31 2014 : Debug: format = "suffix" Thu Mar 27 21:33:31 2014 : Debug: delimiter = "@" Thu Mar 27 21:33:31 2014 : Debug: ignore_default = no Thu Mar 27 21:33:31 2014 : Debug: ignore_null = no Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_files, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_files Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "files" from fil e /etc/freeradius/modules/files Thu Mar 27 21:33:31 2014 : Debug: files { Thu Mar 27 21:33:31 2014 : Debug: usersfile = "/etc/freeradius/users" Thu Mar 27 21:33:31 2014 : Debug: acctusersfile = "/etc/freeradius/acct_us ers" Thu Mar 27 21:33:31 2014 : Debug: preproxy_usersfile = "/etc/freeradius/pr eproxy_users" Thu Mar 27 21:33:31 2014 : Debug: compat = "no" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Checking session {...} for more modul es to load Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_radutmp, checking if it's vali d) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_radutmp Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "radutmp" from f ile /etc/freeradius/modules/radutmp Thu Mar 27 21:33:31 2014 : Debug: radutmp { Thu Mar 27 21:33:31 2014 : Debug: filename = "/var/log/freeradius/radutmp" Thu Mar 27 21:33:31 2014 : Debug: username = "%{User-Name}" Thu Mar 27 21:33:31 2014 : Debug: case_sensitive = yes Thu Mar 27 21:33:31 2014 : Debug: check_with_nas = yes Thu Mar 27 21:33:31 2014 : Debug: perm = 384 Thu Mar 27 21:33:31 2014 : Debug: callerid = yes Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Checking post-proxy {...} for more mo dules to load Thu Mar 27 21:33:31 2014 : Debug: Module: Checking post-auth {...} for more mod ules to load Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_attr_filter Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "attr_filter.acc ess_reject" from file /etc/freeradius/modules/attr_filter Thu Mar 27 21:33:31 2014 : Debug: attr_filter attr_filter.access_reject { Thu Mar 27 21:33:31 2014 : Debug: attrsfile = "/etc/freeradius/attrs.acces s_reject" Thu Mar 27 21:33:31 2014 : Debug: key = "%{User-Name}" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: } # modules Thu Mar 27 21:33:31 2014 : Debug: } # server Thu Mar 27 21:33:31 2014 : Debug: server { # from file /etc/freeradius/radiusd.c onf Thu Mar 27 21:33:31 2014 : Debug: modules { Thu Mar 27 21:33:31 2014 : Debug: Module: Checking authenticate {...} for more modules to load Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_digest, checking if it's valid ) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_digest Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "digest" from fi le /etc/freeradius/modules/digest Thu Mar 27 21:33:31 2014 : Debug: Module: Checking authorize {...} for more mod ules to load Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_preprocess, checking if it's v alid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_preprocess Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "preprocess" fro m file /etc/freeradius/modules/preprocess Thu Mar 27 21:33:31 2014 : Debug: preprocess { Thu Mar 27 21:33:31 2014 : Debug: huntgroups = "/etc/freeradius/huntgroups " Thu Mar 27 21:33:31 2014 : Debug: hints = "/etc/freeradius/hints" Thu Mar 27 21:33:31 2014 : Debug: with_ascend_hack = no Thu Mar 27 21:33:31 2014 : Debug: ascend_channels_per_line = 23 Thu Mar 27 21:33:31 2014 : Debug: with_ntdomain_hack = no Thu Mar 27 21:33:31 2014 : Debug: with_specialix_jetstream_hack = no Thu Mar 27 21:33:31 2014 : Debug: with_cisco_vsa_hack = no Thu Mar 27 21:33:31 2014 : Debug: with_alvarion_vsa_hack = no Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_sql, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_sql Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "sql" from file /etc/freeradius/sql.conf Thu Mar 27 21:33:31 2014 : Debug: sql { Thu Mar 27 21:33:31 2014 : Debug: driver = "rlm_sql_mysql" Thu Mar 27 21:33:31 2014 : Debug: server = "localhost" Thu Mar 27 21:33:31 2014 : Debug: port = "" Thu Mar 27 21:33:31 2014 : Debug: login = "radius" Thu Mar 27 21:33:31 2014 : Debug: password = "radpass" Thu Mar 27 21:33:31 2014 : Debug: radius_db = "radius" Thu Mar 27 21:33:31 2014 : Debug: read_groups = yes Thu Mar 27 21:33:31 2014 : Debug: sqltrace = no Thu Mar 27 21:33:31 2014 : Debug: sqltracefile = "/var/log/freeradius/sqlt race.sql" Thu Mar 27 21:33:31 2014 : Debug: readclients = no Thu Mar 27 21:33:31 2014 : Debug: deletestalesessions = yes Thu Mar 27 21:33:31 2014 : Debug: num_sql_socks = 5 Thu Mar 27 21:33:31 2014 : Debug: lifetime = 0 Thu Mar 27 21:33:31 2014 : Debug: max_queries = 0 Thu Mar 27 21:33:31 2014 : Debug: sql_user_name = "%{User-Name}" Thu Mar 27 21:33:31 2014 : Debug: default_user_profile = "" Thu Mar 27 21:33:31 2014 : Debug: nas_query = "SELECT id, nasname, shortna me, type, secret, server FROM nas" Thu Mar 27 21:33:31 2014 : Debug: authorize_check_query = "SELECT id, user name, attribute, value, op FROM radcheck WHERE username = '% {SQL-User-Name}' ORDER BY id" Thu Mar 27 21:33:31 2014 : Debug: authorize_reply_query = "SELECT id, user name, attribute, value, op FROM radreply WHERE username = '% {SQL-User-Name}' ORDER BY id" Thu Mar 27 21:33:31 2014 : Debug: authorize_group_check_query = "SELECT id , groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" Thu Mar 27 21:33:31 2014 : Debug: authorize_group_reply_query = "SELECT id , groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id" Thu Mar 27 21:33:31 2014 : Debug: accounting_onoff_query = " UPDA TE radacct SET acctstoptime = '%S', a cctsessiontime = unix_timestamp('%S') - u nix_timestamp(acctstarttime), acctterminatecause = '%{Acct-Termina te-Cause}', acctstopdelay = %{%{Acct-Delay-Time}:-0} WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Addres s}' AND acctstarttime <= '%S'" Thu Mar 27 21:33:31 2014 : Debug: accounting_update_query = " UP DATE radacct SET framedipaddress = '%{Framed-IP-Address}' , acctsessiontime = '%{Acct-Session-Time}', acctin putoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{ %{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Ac ct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = ' %{NAS-IP-Address}'" Thu Mar 27 21:33:31 2014 : Debug: accounting_update_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username , realm, nasipaddress, nasportid, nasp orttype, acctstarttime, acctsessiontime, acctauthentic, connectinfo_start, acctinputoctets, acctoutputoctets, calledstatio nid, callingstationid, servicetype, framedprotocol, frame dipaddress, acctstartdelay, xascendsessionsvrkey) VALUE S ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', ' %{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Ac ct-Delay-Time}:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-G igawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '% {X-Ascend-Session-Svr-Key}')" Thu Mar 27 21:33:31 2014 : Debug: accounting_start_query = " INS ERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype , acctstarttime, acctstoptime, acctsessiontime, acctauthen tic, connectinfo_start, connectinfo_stop, acctinputoctets, acct outputoctets, calledstationid, callingstationid, acctterminatecaus e, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL -User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', ' %{Connect-Info}', '', '0', '0', '%{Called-Station-Id}' , '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protoco l}', '%{Framed-IP-Address}', '%{%{Acct-Delay-Time}:-0}', '0', '%{X- Ascend-Session-Svr-Key}')" Thu Mar 27 21:33:31 2014 : Debug: accounting_start_query_alt = " UPDATE radacct SET acctstarttime = '%S', acctstar tdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_start = '%{Conn ect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND u sername = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP- Address}'" Thu Mar 27 21:33:31 2014 : Debug: accounting_stop_query = " UPDA TE radacct SET acctstoptime = '%S', acctsessiont ime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Inp ut-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Oct ets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-I nfo}' WHERE acctsessionid = '%{Acct-Session-Id}' AND usern ame = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Ad dress}'" Thu Mar 27 21:33:31 2014 : Debug: accounting_stop_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, ac ctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calle dstationid, callingstationid, acctterminatecause, servicetype, fram edprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS- Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Tim e}:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{%{Acct-Input-Gigawords}:-0} ' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Outp ut-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Termin ate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP- Address}', '0', '%{%{Acct-Delay-Time}:-0}')" Thu Mar 27 21:33:31 2014 : Debug: group_membership_query = "SELECT groupna me FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" Thu Mar 27 21:33:31 2014 : Debug: connect_failure_retry_delay = 60 Thu Mar 27 21:33:31 2014 : Debug: simul_count_query = "" Thu Mar 27 21:33:31 2014 : Debug: simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotoco l FROM radacct WHE RE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" Thu Mar 27 21:33:31 2014 : Debug: postauth_query = "INSERT INTO radpostaut h (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply :Packet-Type}', '%S')" Thu Mar 27 21:33:31 2014 : Debug: safe-characters = "@abcdefghijklmnopqrst uvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm _sql_mysql) loaded and linked Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Attempting to connect to radius@ localhost:/radius Thu Mar 27 21:33:31 2014 : Debug: rlm_sql (sql): starting 0 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Attempting to connect rlm_sql_my sql #0 Thu Mar 27 21:33:31 2014 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Connected new DB handle, #0 Thu Mar 27 21:33:31 2014 : Debug: rlm_sql (sql): starting 1 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Attempting to connect rlm_sql_my sql #1 Thu Mar 27 21:33:31 2014 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Connected new DB handle, #1 Thu Mar 27 21:33:31 2014 : Debug: rlm_sql (sql): starting 2 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Attempting to connect rlm_sql_my sql #2 Thu Mar 27 21:33:31 2014 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Connected new DB handle, #2 Thu Mar 27 21:33:31 2014 : Debug: rlm_sql (sql): starting 3 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Attempting to connect rlm_sql_my sql #3 Thu Mar 27 21:33:31 2014 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Connected new DB handle, #3 Thu Mar 27 21:33:31 2014 : Debug: rlm_sql (sql): starting 4 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Attempting to connect rlm_sql_my sql #4 Thu Mar 27 21:33:31 2014 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Thu Mar 27 21:33:31 2014 : Info: rlm_sql (sql): Connected new DB handle, #4 Thu Mar 27 21:33:31 2014 : Debug: Module: Checking preacct {...} for more modul es to load Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_acct_unique, checking if it's valid) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_acct_unique Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "acct_unique" fr om file /etc/freeradius/modules/acct_unique Thu Mar 27 21:33:31 2014 : Debug: acct_unique { Thu Mar 27 21:33:31 2014 : Debug: key = "User-Name, Acct-Session-Id, NAS-I P-Address, Client-IP-Address, NAS-Port" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Checking accounting {...} for more mo dules to load Thu Mar 27 21:33:31 2014 : Debug: (Loaded rlm_detail, checking if it's valid ) Thu Mar 27 21:33:31 2014 : Debug: Module: Linked to module rlm_detail Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "detail" from fi le /etc/freeradius/modules/detail Thu Mar 27 21:33:31 2014 : Debug: detail { Thu Mar 27 21:33:31 2014 : Debug: detailfile = "/var/log/freeradius/radacc t/%{Client-IP-Address}/detail-%Y%m%d" Thu Mar 27 21:33:31 2014 : Debug: header = "%t" Thu Mar 27 21:33:31 2014 : Debug: detailperm = 384 Thu Mar 27 21:33:31 2014 : Debug: dirperm = 493 Thu Mar 27 21:33:31 2014 : Debug: locking = no Thu Mar 27 21:33:31 2014 : Debug: log_packet_header = no Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Instantiating module "attr_filter.acc ounting_response" from file /etc/freeradius/modules/attr_filter Thu Mar 27 21:33:31 2014 : Debug: attr_filter attr_filter.accounting_response { Thu Mar 27 21:33:31 2014 : Debug: attrsfile = "/etc/freeradius/attrs.accou nting_response" Thu Mar 27 21:33:31 2014 : Debug: key = "%{User-Name}" Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Module: Checking session {...} for more modul es to load Thu Mar 27 21:33:31 2014 : Debug: Module: Checking post-proxy {...} for more mo dules to load Thu Mar 27 21:33:31 2014 : Debug: Module: Checking post-auth {...} for more mod ules to load Thu Mar 27 21:33:31 2014 : Debug: } # modules Thu Mar 27 21:33:31 2014 : Debug: } # server Thu Mar 27 21:33:31 2014 : Debug: radiusd: #### Opening IP addresses and Ports # ### Thu Mar 27 21:33:31 2014 : Debug: listen { Thu Mar 27 21:33:31 2014 : Debug: type = "auth" Thu Mar 27 21:33:31 2014 : Debug: ipaddr = * Thu Mar 27 21:33:31 2014 : Debug: port = 0 Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: listen { Thu Mar 27 21:33:31 2014 : Debug: type = "acct" Thu Mar 27 21:33:31 2014 : Debug: ipaddr = * Thu Mar 27 21:33:31 2014 : Debug: port = 0 Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: listen { Thu Mar 27 21:33:31 2014 : Debug: type = "auth" Thu Mar 27 21:33:31 2014 : Debug: ipaddr = 127.0.0.1 Thu Mar 27 21:33:31 2014 : Debug: port = 18120 Thu Mar 27 21:33:31 2014 : Debug: } Thu Mar 27 21:33:31 2014 : Debug: Listening on authentication address * port 181 2 Thu Mar 27 21:33:31 2014 : Debug: Listening on accounting address * port 1813 Thu Mar 27 21:33:31 2014 : Debug: Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Thu Mar 27 21:33:31 2014 : Debug: Listening on proxy address * port 1814 Thu Mar 27 21:33:31 2014 : Info: Ready to process requests. rad_recv: Accounting-Request packet from host 127.0.0.1 port 39179, id=59, lengt h=257 ChilliSpot-Version = "1.3.0" ChilliSpot-Attr-10 = 0x00000002 Event-Timestamp = "Mar 27 2014 21:35:52 CAT" User-Name = "test" Acct-Input-Octets = 101730846 Acct-Output-Octets = 4385914 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Acct-Input-Packets = 86549 Acct-Output-Packets = 59069 Acct-Session-Time = 12303 Acct-Status-Type = Interim-Update Acct-Session-Id = "53344d3a00000002" Framed-IP-Address = 10.1.0.7 NAS-Port-Type = Wireless-802.11 NAS-Port = 2 NAS-Port-Id = "00000002" Calling-Station-Id = "D8-EB-97-22-A0-8C" Called-Station-Id = "00-0A-CD-1F-F6-43" NAS-IP-Address = 10.1.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" Thu Mar 27 21:35:53 2014 : Info: # Executing section preacct from file /etc/free radius/sites-enabled/default Thu Mar 27 21:35:53 2014 : Info: +- entering group preacct {...} Thu Mar 27 21:35:53 2014 : Info: ++[preprocess] returns ok Thu Mar 27 21:35:53 2014 : Info: [acct_unique] Hashing 'NAS-Port = 2,Client-IP-A ddress = 127.0.0.1,NAS-IP-Address = 10.1.0.1,Acct-Session-Id = "53344d3a00000002 ",User-Name = "test"' Thu Mar 27 21:35:53 2014 : Info: [acct_unique] Acct-Unique-Session-ID = "7874c3e 20d038361". Thu Mar 27 21:35:53 2014 : Info: ++[acct_unique] returns ok Thu Mar 27 21:35:53 2014 : Info: [suffix] No '@' in User-Name = "test", looking up realm NULL Thu Mar 27 21:35:53 2014 : Info: [suffix] No such realm "NULL" Thu Mar 27 21:35:53 2014 : Info: ++[suffix] returns noop Thu Mar 27 21:35:53 2014 : Info: ++[files] returns noop Thu Mar 27 21:35:53 2014 : Info: # Executing section accounting from file /etc/f reeradius/sites-enabled/default Thu Mar 27 21:35:53 2014 : Info: +- entering group accounting {...} Thu Mar 27 21:35:53 2014 : Info: [detail] expand: /var/log/freeradius/rada cct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/ detail-20140327 Thu Mar 27 21:35:53 2014 : Info: [detail] /var/log/freeradius/radacct/%{Client-I P-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail -20140327 Thu Mar 27 21:35:53 2014 : Info: [detail] expand: %t -> Thu Mar 27 21:35:5 3 2014 Thu Mar 27 21:35:53 2014 : Info: ++[detail] returns ok Thu Mar 27 21:35:53 2014 : Info: ++[unix] returns noop Thu Mar 27 21:35:53 2014 : Info: [radutmp] expand: /var/log/freeradius/radu tmp -> /var/log/freeradius/radutmp Thu Mar 27 21:35:53 2014 : Info: [radutmp] expand: %{User-Name} -> test Thu Mar 27 21:35:53 2014 : Info: ++[radutmp] returns ok Thu Mar 27 21:35:53 2014 : Info: [sql] expand: %{User-Name} -> test Thu Mar 27 21:35:53 2014 : Info: [sql] sql_set_user escaped user --> 'test' Thu Mar 27 21:35:53 2014 : Info: [sql] expand: %{Acct-Input-Gigawords} -> 0 Thu Mar 27 21:35:53 2014 : Info: [sql] expand: %{Acct-Input-Octets} -> 10173084 6 Thu Mar 27 21:35:53 2014 : Info: [sql] expand: %{Acct-Output-Gigawords} -> 0 Thu Mar 27 21:35:53 2014 : Info: [sql] expand: %{Acct-Output-Octets} -> 4385914 Thu Mar 27 21:35:53 2014 : Info: [sql] expand: UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acct sessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{ %{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Ac ct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigaw ords}:-0}' << 32 | '%{%{Acct-Output-Octets}:- 0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET framedipaddress = '10.1. 0.7', acctsessiontime = '12303', acctinputoctets = '0' << 32 | '101730846', a cctoutputoctets = '0' << 32 | '4385914' WHERE acctsessionid = '53344d3a00000002' AND username = 'test' Thu Mar 27 21:35:53 2014 : Debug: rlm_sql (sql): Reserving sql socket id: 4 Thu Mar 27 21:35:53 2014 : Debug: rlm_sql (sql): Released sql socket id: 4 Thu Mar 27 21:35:53 2014 : Info: ++[sql] returns ok Thu Mar 27 21:35:53 2014 : Info: ++[exec] returns noop Thu Mar 27 21:35:53 2014 : Info: [attr_filter.accounting_response] expand: %{User-Name} -> test Thu Mar 27 21:35:53 2014 : Debug: attr_filter: Matched entry DEFAULT at line 12 Thu Mar 27 21:35:53 2014 : Info: ++[attr_filter.accounting_response] returns upd ated Sending Accounting-Response of id 59 to 127.0.0.1 port 39179 Thu Mar 27 21:35:53 2014 : Info: Finished request 0. Thu Mar 27 21:35:53 2014 : Info: Cleaning up request 0 ID 59 with timestamp +142 Thu Mar 27 21:35:53 2014 : Debug: Going to the next request Thu Mar 27 21:35:53 2014 : Info: Ready to process requests. rad_recv: Accounting-Request packet from host 127.0.0.1 port 39179, id=60, lengt h=263 ChilliSpot-Version = "1.3.0" ChilliSpot-Attr-10 = 0x00000002 Event-Timestamp = "Mar 27 2014 21:37:24 CAT" User-Name = "test" Acct-Input-Octets = 101746420 Acct-Output-Octets = 4396684 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Acct-Input-Packets = 86620 Acct-Output-Packets = 59154 Acct-Session-Time = 12395 Acct-Terminate-Cause = User-Request Acct-Status-Type = Stop Acct-Session-Id = "53344d3a00000002" Framed-IP-Address = 10.1.0.7 NAS-Port-Type = Wireless-802.11 NAS-Port = 2 NAS-Port-Id = "00000002" Calling-Station-Id = "D8-EB-97-22-A0-8C" Called-Station-Id = "00-0A-CD-1F-F6-43" NAS-IP-Address = 10.1.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" Thu Mar 27 21:37:25 2014 : Info: # Executing section preacct from file /etc/free radius/sites-enabled/default Thu Mar 27 21:37:25 2014 : Info: +- entering group preacct {...} Thu Mar 27 21:37:25 2014 : Info: ++[preprocess] returns ok Thu Mar 27 21:37:25 2014 : Info: [acct_unique] Hashing 'NAS-Port = 2,Client-IP-A ddress = 127.0.0.1,NAS-IP-Address = 10.1.0.1,Acct-Session-Id = "53344d3a00000002 ",User-Name = "test"' Thu Mar 27 21:37:25 2014 : Info: [acct_unique] Acct-Unique-Session-ID = "7874c3e 20d038361". Thu Mar 27 21:37:25 2014 : Info: ++[acct_unique] returns ok Thu Mar 27 21:37:25 2014 : Info: [suffix] No '@' in User-Name = "test", looking up realm NULL Thu Mar 27 21:37:25 2014 : Info: [suffix] No such realm "NULL" Thu Mar 27 21:37:25 2014 : Info: ++[suffix] returns noop Thu Mar 27 21:37:25 2014 : Info: ++[files] returns noop Thu Mar 27 21:37:25 2014 : Info: # Executing section accounting from file /etc/f reeradius/sites-enabled/default Thu Mar 27 21:37:25 2014 : Info: +- entering group accounting {...} Thu Mar 27 21:37:25 2014 : Info: [detail] expand: /var/log/freeradius/rada cct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/ detail-20140327 Thu Mar 27 21:37:25 2014 : Info: [detail] /var/log/freeradius/radacct/%{Client-I P-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail -20140327 Thu Mar 27 21:37:25 2014 : Info: [detail] expand: %t -> Thu Mar 27 21:37:2 5 2014 Thu Mar 27 21:37:25 2014 : Info: ++[detail] returns ok Thu Mar 27 21:37:25 2014 : Info: ++[unix] returns ok Thu Mar 27 21:37:25 2014 : Info: [radutmp] expand: /var/log/freeradius/radu tmp -> /var/log/freeradius/radutmp Thu Mar 27 21:37:25 2014 : Info: [radutmp] expand: %{User-Name} -> test Thu Mar 27 21:37:25 2014 : Info: ++[radutmp] returns ok Thu Mar 27 21:37:25 2014 : Info: [sql] expand: %{User-Name} -> test Thu Mar 27 21:37:25 2014 : Info: [sql] sql_set_user escaped user --> 'test' Thu Mar 27 21:37:25 2014 : Info: [sql] expand: %{Acct-Input-Gigawords} -> 0 Thu Mar 27 21:37:25 2014 : Info: [sql] expand: %{Acct-Input-Octets} -> 10174642 0 Thu Mar 27 21:37:25 2014 : Info: [sql] expand: %{Acct-Output-Gigawords} -> 0 Thu Mar 27 21:37:25 2014 : Info: [sql] expand: %{Acct-Output-Octets} -> 4396684 Thu Mar 27 21:37:25 2014 : Info: [sql] expand: %{Acct-Delay-Time} -> Thu Mar 27 21:37:25 2014 : Info: [sql] ... expanding second conditional Thu Mar 27 21:37:25 2014 : Info: [sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct- Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0} ' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminate cause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-D elay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' W HERE acctsessionid = '%{Acct-Session-Id}' AND username = '% {SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET acctstoptime = '2014-03-27 21:37:25', acctsessiontime = '12395', acctinputoctets = '0 ' << 32 | '101746420', acctoutput octets = '0' < Thu Mar 27 21:37:25 2014 : Debug: rlm_sql (sql): Reserving sql socket id: 3 Thu Mar 27 21:37:25 2014 : Debug: rlm_sql (sql): Released sql socket id: 3 Thu Mar 27 21:37:25 2014 : Info: ++[sql] returns ok Thu Mar 27 21:37:25 2014 : Info: ++[exec] returns noop Thu Mar 27 21:37:25 2014 : Info: [attr_filter.accounting_response] expand: %{User-Name} -> test Thu Mar 27 21:37:25 2014 : Debug: attr_filter: Matched entry DEFAULT at line 12 Thu Mar 27 21:37:25 2014 : Info: ++[attr_filter.accounting_response] returns upd ated Sending Accounting-Response of id 60 to 127.0.0.1 port 39179 Thu Mar 27 21:37:25 2014 : Info: Finished request 1. Thu Mar 27 21:37:25 2014 : Info: Cleaning up request 1 ID 60 with timestamp +234 Thu Mar 27 21:37:25 2014 : Debug: Going to the next request Thu Mar 27 21:37:25 2014 : Info: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 46418, id=62, length=28 7 ChilliSpot-Version = "1.3.0" User-Name = "test" CHAP-Challenge = 0x1fd6adcd32331a15a5bc4df75319b0ca CHAP-Password = 0x00f2f275270c89c401db48362eb9d9ea77 Service-Type = Login-User Acct-Session-Id = "53347df500000002" Framed-IP-Address = 10.1.0.7 NAS-Port-Type = Wireless-802.11 NAS-Port = 2 NAS-Port-Id = "00000002" Calling-Station-Id = "D8-EB-97-22-A0-8C" Called-Station-Id = "00-0A-CD-1F-F6-43" NAS-IP-Address = 10.1.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" WISPr-Logoff-URL = "http://10.1.0.1:3990/logoff" Message-Authenticator = 0x674721e8457ec33833cc33fe1529be79 Thu Mar 27 21:37:42 2014 : Info: # Executing section authorize from file /etc/fr eeradius/sites-enabled/default Thu Mar 27 21:37:42 2014 : Info: +- entering group authorize {...} Thu Mar 27 21:37:42 2014 : Info: ++[preprocess] returns ok Thu Mar 27 21:37:42 2014 : Info: [chap] Setting 'Auth-Type := CHAP' Thu Mar 27 21:37:42 2014 : Info: ++[chap] returns ok Thu Mar 27 21:37:42 2014 : Info: ++[mschap] returns noop Thu Mar 27 21:37:42 2014 : Info: ++[digest] returns noop Thu Mar 27 21:37:42 2014 : Info: [suffix] No '@' in User-Name = "test", looking up realm NULL Thu Mar 27 21:37:42 2014 : Info: [suffix] No such realm "NULL" Thu Mar 27 21:37:42 2014 : Info: ++[suffix] returns noop Thu Mar 27 21:37:42 2014 : Info: [eap] No EAP-Message, not doing EAP Thu Mar 27 21:37:42 2014 : Info: ++[eap] returns noop Thu Mar 27 21:37:42 2014 : Info: [sql] expand: %{User-Name} -> test Thu Mar 27 21:37:42 2014 : Info: [sql] sql_set_user escaped user --> 'test' Thu Mar 27 21:37:42 2014 : Debug: rlm_sql (sql): Reserving sql socket id: 2 Thu Mar 27 21:37:42 2014 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FRO M radcheck WHERE username = 'test' ORDER BY id Thu Mar 27 21:37:42 2014 : Info: [sql] User found in radcheck table Thu Mar 27 21:37:42 2014 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FRO M radreply WHERE username = 'test' ORDER BY id Thu Mar 27 21:37:42 2014 : Info: [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY pr iority -> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority Thu Mar 27 21:37:42 2014 : Debug: rlm_sql (sql): Released sql socket id: 2 Thu Mar 27 21:37:42 2014 : Info: ++[sql] returns ok Thu Mar 27 21:37:42 2014 : Debug: rlm_sqlcounter: Entering module authorize code Thu Mar 27 21:37:42 2014 : Debug: rlm_sqlcounter: Could not find Check item valu e pair Thu Mar 27 21:37:42 2014 : Info: ++[chillispot_max_bytes] returns noop Thu Mar 27 21:37:42 2014 : Debug: rlm_sqlcounter: Entering module authorize code Thu Mar 27 21:37:42 2014 : Debug: rlm_sqlcounter: Could not find Check item valu e pair Thu Mar 27 21:37:42 2014 : Info: ++[noresetcounter] returns noop Thu Mar 27 21:37:42 2014 : Info: ++[expiration] returns noop Thu Mar 27 21:37:42 2014 : Info: ++[logintime] returns noop Thu Mar 27 21:37:42 2014 : Info: [pap] WARNING: Auth-Type already set. Not sett ing to PAP Thu Mar 27 21:37:42 2014 : Info: ++[pap] returns noop Thu Mar 27 21:37:42 2014 : Info: Found Auth-Type = CHAP Thu Mar 27 21:37:42 2014 : Info: # Executing group from file /etc/freeradius/sit es-enabled/default Thu Mar 27 21:37:42 2014 : Info: +- entering group CHAP {...} Thu Mar 27 21:37:42 2014 : Info: [chap] login attempt by "test" with CHAP passwo rd Thu Mar 27 21:37:42 2014 : Info: [chap] Using clear text password "test" for use r test authentication. Thu Mar 27 21:37:42 2014 : Info: [chap] chap user test authenticated succesfully Thu Mar 27 21:37:42 2014 : Info: ++[chap] returns ok Thu Mar 27 21:37:42 2014 : Info: # Executing section post-auth from file /etc/fr eeradius/sites-enabled/default Thu Mar 27 21:37:42 2014 : Info: +- entering group post-auth {...} Thu Mar 27 21:37:42 2014 : Info: ++[exec] returns noop Sending Access-Accept of id 62 to 127.0.0.1 port 46418 Thu Mar 27 21:37:42 2014 : Info: Finished request 2. Thu Mar 27 21:37:42 2014 : Debug: Going to the next request Thu Mar 27 21:37:42 2014 : Debug: Waking up in 4.9 seconds. rad_recv: Accounting-Request packet from host 127.0.0.1 port 39179, id=61, lengt h=215 ChilliSpot-Version = "1.3.0" ChilliSpot-Attr-10 = 0x00000002 Event-Timestamp = "Mar 27 2014 21:37:40 CAT" User-Name = "test" Acct-Status-Type = Start Acct-Session-Id = "53347df500000002" Framed-IP-Address = 10.1.0.7 NAS-Port-Type = Wireless-802.11 NAS-Port = 2 NAS-Port-Id = "00000002" Calling-Station-Id = "D8-EB-97-22-A0-8C" Called-Station-Id = "00-0A-CD-1F-F6-43" NAS-IP-Address = 10.1.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" Thu Mar 27 21:37:42 2014 : Info: # Executing section preacct from file /etc/free radius/sites-enabled/default Thu Mar 27 21:37:42 2014 : Info: +- entering group preacct {...} Thu Mar 27 21:37:42 2014 : Info: ++[preprocess] returns ok Thu Mar 27 21:37:42 2014 : Info: [acct_unique] Hashing 'NAS-Port = 2,Client-IP-A ddress = 127.0.0.1,NAS-IP-Address = 10.1.0.1,Acct-Session-Id = "53347df500000002 ",User-Name = "test"' Thu Mar 27 21:37:42 2014 : Info: [acct_unique] Acct-Unique-Session-ID = "c1c7c7a b5ce9171a". Thu Mar 27 21:37:42 2014 : Info: ++[acct_unique] returns ok Thu Mar 27 21:37:42 2014 : Info: [suffix] No '@' in User-Name = "test", looking up realm NULL Thu Mar 27 21:37:42 2014 : Info: [suffix] No such realm "NULL" Thu Mar 27 21:37:42 2014 : Info: ++[suffix] returns noop Thu Mar 27 21:37:42 2014 : Info: ++[files] returns noop Thu Mar 27 21:37:42 2014 : Info: # Executing section accounting from file /etc/f reeradius/sites-enabled/default Thu Mar 27 21:37:42 2014 : Info: +- entering group accounting {...} Thu Mar 27 21:37:42 2014 : Info: [detail] expand: /var/log/freeradius/rada cct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/ detail-20140327 Thu Mar 27 21:37:42 2014 : Info: [detail] /var/log/freeradius/radacct/%{Client-I P-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail -20140327 Thu Mar 27 21:37:42 2014 : Info: [detail] expand: %t -> Thu Mar 27 21:37:4 2 2014 Thu Mar 27 21:37:42 2014 : Info: ++[detail] returns ok Thu Mar 27 21:37:42 2014 : Info: ++[unix] returns ok Thu Mar 27 21:37:42 2014 : Info: [radutmp] expand: /var/log/freeradius/radu tmp -> /var/log/freeradius/radutmp Thu Mar 27 21:37:42 2014 : Info: [radutmp] expand: %{User-Name} -> test Thu Mar 27 21:37:42 2014 : Info: ++[radutmp] returns ok Thu Mar 27 21:37:42 2014 : Info: [sql] expand: %{User-Name} -> test Thu Mar 27 21:37:42 2014 : Info: [sql] sql_set_user escaped user --> 'test' Thu Mar 27 21:37:42 2014 : Info: [sql] expand: %{Acct-Delay-Time} -> Thu Mar 27 21:37:42 2014 : Info: [sql] ... expanding second conditional Thu Mar 27 21:37:42 2014 : Info: [sql] expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstartti me, acctstoptime, acctsessiontime, acctauthentic, connectinf o_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, se rvicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct- Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Por t-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Stati on-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP- Address}', Thu Mar 27 21:37:42 2014 : Debug: rlm_sql (sql): Reserving sql socket id: 1 Thu Mar 27 21:37:42 2014 : Debug: rlm_sql (sql): Released sql socket id: 1 Thu Mar 27 21:37:42 2014 : Info: ++[sql] returns ok Thu Mar 27 21:37:42 2014 : Info: ++[exec] returns noop Thu Mar 27 21:37:42 2014 : Info: [attr_filter.accounting_response] expand: %{User-Name} -> test Thu Mar 27 21:37:42 2014 : Debug: attr_filter: Matched entry DEFAULT at line 12 Thu Mar 27 21:37:42 2014 : Info: ++[attr_filter.accounting_response] returns upd ated Sending Accounting-Response of id 61 to 127.0.0.1 port 39179 Thu Mar 27 21:37:42 2014 : Info: Finished request 3. Thu Mar 27 21:37:42 2014 : Info: Cleaning up request 3 ID 61 with timestamp +251 Thu Mar 27 21:37:42 2014 : Debug: Going to the next request Thu Mar 27 21:37:42 2014 : Debug: Waking up in 4.9 seconds. Thu Mar 27 21:37:47 2014 : Info: Cleaning up request 2 ID 62 with timestamp +251 Thu Mar 27 21:37:47 2014 : Info: Ready to process requests. rad_recv: Accounting-Request packet from host 127.0.0.1 port 39179, id=62, lengt h=263 ChilliSpot-Version = "1.3.0" ChilliSpot-Attr-10 = 0x00000002 Event-Timestamp = "Mar 27 2014 21:37:45 CAT" User-Name = "test" Acct-Input-Octets = 4994 Acct-Output-Octets = 19869 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Acct-Input-Packets = 31 Acct-Output-Packets = 36 Acct-Session-Time = 5 Acct-Terminate-Cause = User-Request Acct-Status-Type = Stop Acct-Session-Id = "53347df500000002" Framed-IP-Address = 10.1.0.7 NAS-Port-Type = Wireless-802.11 NAS-Port = 2 NAS-Port-Id = "00000002" Calling-Station-Id = "D8-EB-97-22-A0-8C" Called-Station-Id = "00-0A-CD-1F-F6-43" NAS-IP-Address = 10.1.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" Thu Mar 27 21:37:47 2014 : Info: # Executing section preacct from file /etc/free radius/sites-enabled/default Thu Mar 27 21:37:47 2014 : Info: +- entering group preacct {...} Thu Mar 27 21:37:47 2014 : Info: ++[preprocess] returns ok Thu Mar 27 21:37:47 2014 : Info: [acct_unique] Hashing 'NAS-Port = 2,Client-IP-A ddress = 127.0.0.1,NAS-IP-Address = 10.1.0.1,Acct-Session-Id = "53347df500000002 ",User-Name = "test"' Thu Mar 27 21:37:47 2014 : Info: [acct_unique] Acct-Unique-Session-ID = "c1c7c7a b5ce9171a". Thu Mar 27 21:37:47 2014 : Info: ++[acct_unique] returns ok Thu Mar 27 21:37:47 2014 : Info: [suffix] No '@' in User-Name = "test", looking up realm NULL Thu Mar 27 21:37:47 2014 : Info: [suffix] No such realm "NULL" Thu Mar 27 21:37:47 2014 : Info: ++[suffix] returns noop Thu Mar 27 21:37:47 2014 : Info: ++[files] returns noop Thu Mar 27 21:37:47 2014 : Info: # Executing section accounting from file /etc/f reeradius/sites-enabled/default Thu Mar 27 21:37:47 2014 : Info: +- entering group accounting {...} Thu Mar 27 21:37:47 2014 : Info: [detail] expand: /var/log/freeradius/rada cct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/ detail-20140327 Thu Mar 27 21:37:47 2014 : Info: [detail] /var/log/freeradius/radacct/%{Client-I P-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail -20140327 Thu Mar 27 21:37:47 2014 : Info: [detail] expand: %t -> Thu Mar 27 21:37:4 7 2014 Thu Mar 27 21:37:47 2014 : Info: ++[detail] returns ok Thu Mar 27 21:37:47 2014 : Info: ++[unix] returns ok Thu Mar 27 21:37:47 2014 : Info: [radutmp] expand: /var/log/freeradius/radu tmp -> /var/log/freeradius/radutmp Thu Mar 27 21:37:47 2014 : Info: [radutmp] expand: %{User-Name} -> test Thu Mar 27 21:37:47 2014 : Info: ++[radutmp] returns ok Thu Mar 27 21:37:47 2014 : Info: [sql] expand: %{User-Name} -> test Thu Mar 27 21:37:47 2014 : Info: [sql] sql_set_user escaped user --> 'test' Thu Mar 27 21:37:47 2014 : Info: [sql] expand: %{Acct-Input-Gigawords} -> 0 Thu Mar 27 21:37:47 2014 : Info: [sql] expand: %{Acct-Input-Octets} -> 4994 Thu Mar 27 21:37:47 2014 : Info: [sql] expand: %{Acct-Output-Gigawords} -> 0 Thu Mar 27 21:37:47 2014 : Info: [sql] expand: %{Acct-Output-Octets} -> 19869 Thu Mar 27 21:37:47 2014 : Info: [sql] expand: %{Acct-Delay-Time} -> Thu Mar 27 21:37:47 2014 : Info: [sql] ... expanding second conditional Thu Mar 27 21:37:47 2014 : Info: [sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct- Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0} ' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminate cause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-D elay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' W HERE acctsessionid = '%{Acct-Session-Id}' AND username = '% {SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET acctstoptime = '2014-03-27 21:37:47', acctsessiontime = '5', acctinputoctets = '0' << 32 | '4994', acctoutputoctets = '0' << 32 | Thu Mar 27 21:37:47 2014 : Debug: rlm_sql (sql): Reserving sql socket id: 0 Thu Mar 27 21:37:47 2014 : Debug: rlm_sql (sql): Released sql socket id: 0 Thu Mar 27 21:37:47 2014 : Info: ++[sql] returns ok Thu Mar 27 21:37:47 2014 : Info: ++[exec] returns noop Thu Mar 27 21:37:47 2014 : Info: [attr_filter.accounting_response] expand: %{User-Name} -> test Thu Mar 27 21:37:47 2014 : Debug: attr_filter: Matched entry DEFAULT at line 12 Thu Mar 27 21:37:47 2014 : Info: ++[attr_filter.accounting_response] returns upd ated Sending Accounting-Response of id 62 to 127.0.0.1 port 39179 Thu Mar 27 21:37:47 2014 : Info: Finished request 4. Thu Mar 27 21:37:47 2014 : Info: Cleaning up request 4 ID 62 with timestamp +256 Thu Mar 27 21:37:47 2014 : Debug: Going to the next request Thu Mar 27 21:37:47 2014 : Info: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 43771, id=89, length=28 7 ChilliSpot-Version = "1.3.0" User-Name = "test" CHAP-Challenge = 0x1fd6adcd32331a15a5bc4df75319b0ca CHAP-Password = 0x00f2f275270c89c401db48362eb9d9ea77 Service-Type = Login-User Acct-Session-Id = "53347e0b00000002" Framed-IP-Address = 10.1.0.7 NAS-Port-Type = Wireless-802.11 NAS-Port = 2 NAS-Port-Id = "00000002" Calling-Station-Id = "D8-EB-97-22-A0-8C" Called-Station-Id = "00-0A-CD-1F-F6-43" NAS-IP-Address = 10.1.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" WISPr-Logoff-URL = "http://10.1.0.1:3990/logoff" Message-Authenticator = 0x8e0995898c93e6afe0dab83ef79781c8 Thu Mar 27 21:38:07 2014 : Info: # Executing section authorize from file /etc/fr eeradius/sites-enabled/default Thu Mar 27 21:38:07 2014 : Info: +- entering group authorize {...} Thu Mar 27 21:38:07 2014 : Info: ++[preprocess] returns ok Thu Mar 27 21:38:07 2014 : Info: [chap] Setting 'Auth-Type := CHAP' Thu Mar 27 21:38:07 2014 : Info: ++[chap] returns ok Thu Mar 27 21:38:07 2014 : Info: ++[mschap] returns noop Thu Mar 27 21:38:07 2014 : Info: ++[digest] returns noop Thu Mar 27 21:38:07 2014 : Info: [suffix] No '@' in User-Name = "test", looking up realm NULL Thu Mar 27 21:38:07 2014 : Info: [suffix] No such realm "NULL" Thu Mar 27 21:38:07 2014 : Info: ++[suffix] returns noop Thu Mar 27 21:38:07 2014 : Info: [eap] No EAP-Message, not doing EAP Thu Mar 27 21:38:07 2014 : Info: ++[eap] returns noop Thu Mar 27 21:38:07 2014 : Info: [sql] expand: %{User-Name} -> test Thu Mar 27 21:38:07 2014 : Info: [sql] sql_set_user escaped user --> 'test' Thu Mar 27 21:38:07 2014 : Debug: rlm_sql (sql): Reserving sql socket id: 4 Thu Mar 27 21:38:07 2014 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FRO M radcheck WHERE username = 'test' ORDER BY id Thu Mar 27 21:38:07 2014 : Info: [sql] User found in radcheck table Thu Mar 27 21:38:07 2014 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FRO M radreply WHERE username = 'test' ORDER BY id Thu Mar 27 21:38:07 2014 : Info: [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY pr iority -> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority Thu Mar 27 21:38:07 2014 : Debug: rlm_sql (sql): Released sql socket id: 4 Thu Mar 27 21:38:07 2014 : Info: ++[sql] returns ok Thu Mar 27 21:38:07 2014 : Debug: rlm_sqlcounter: Entering module authorize code Thu Mar 27 21:38:07 2014 : Debug: rlm_sqlcounter: Could not find Check item valu e pair Thu Mar 27 21:38:07 2014 : Info: ++[chillispot_max_bytes] returns noop Thu Mar 27 21:38:07 2014 : Debug: rlm_sqlcounter: Entering module authorize code Thu Mar 27 21:38:07 2014 : Debug: rlm_sqlcounter: Could not find Check item valu e pair Thu Mar 27 21:38:07 2014 : Info: ++[noresetcounter] returns noop Thu Mar 27 21:38:07 2014 : Info: ++[expiration] returns noop Thu Mar 27 21:38:07 2014 : Info: ++[logintime] returns noop Thu Mar 27 21:38:07 2014 : Info: [pap] WARNING: Auth-Type already set. Not sett ing to PAP Thu Mar 27 21:38:07 2014 : Info: ++[pap] returns noop Thu Mar 27 21:38:07 2014 : Info: Found Auth-Type = CHAP Thu Mar 27 21:38:07 2014 : Info: # Executing group from file /etc/freeradius/sit es-enabled/default Thu Mar 27 21:38:07 2014 : Info: +- entering group CHAP {...} Thu Mar 27 21:38:07 2014 : Info: [chap] login attempt by "test" with CHAP passwo rd Thu Mar 27 21:38:07 2014 : Info: [chap] Using clear text password "test" for use r test authentication. Thu Mar 27 21:38:07 2014 : Info: [chap] chap user test authenticated succesfully Thu Mar 27 21:38:07 2014 : Info: ++[chap] returns ok Thu Mar 27 21:38:07 2014 : Info: # Executing section post-auth from file /etc/fr eeradius/sites-enabled/default Thu Mar 27 21:38:07 2014 : Info: +- entering group post-auth {...} Thu Mar 27 21:38:07 2014 : Info: ++[exec] returns noop Sending Access-Accept of id 89 to 127.0.0.1 port 43771 Thu Mar 27 21:38:07 2014 : Info: Finished request 5. Thu Mar 27 21:38:07 2014 : Debug: Going to the next request Thu Mar 27 21:38:07 2014 : Debug: Waking up in 4.9 seconds. rad_recv: Accounting-Request packet from host 127.0.0.1 port 39179, id=63, lengt h=215 ChilliSpot-Version = "1.3.0" ChilliSpot-Attr-10 = 0x00000002 Event-Timestamp = "Mar 27 2014 21:38:06 CAT" User-Name = "test" Acct-Status-Type = Start Acct-Session-Id = "53347e0b00000002" Framed-IP-Address = 10.1.0.7 NAS-Port-Type = Wireless-802.11 NAS-Port = 2 NAS-Port-Id = "00000002" Calling-Station-Id = "D8-EB-97-22-A0-8C" Called-Station-Id = "00-0A-CD-1F-F6-43" NAS-IP-Address = 10.1.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" Thu Mar 27 21:38:07 2014 : Info: # Executing section preacct from file /etc/free radius/sites-enabled/default Thu Mar 27 21:38:07 2014 : Info: +- entering group preacct {...} Thu Mar 27 21:38:07 2014 : Info: ++[preprocess] returns ok Thu Mar 27 21:38:07 2014 : Info: [acct_unique] Hashing 'NAS-Port = 2,Client-IP-A ddress = 127.0.0.1,NAS-IP-Address = 10.1.0.1,Acct-Session-Id = "53347e0b00000002 ",User-Name = "test"' Thu Mar 27 21:38:07 2014 : Info: [acct_unique] Acct-Unique-Session-ID = "1f7c3e3 75e42563b". Thu Mar 27 21:38:07 2014 : Info: ++[acct_unique] returns ok Thu Mar 27 21:38:07 2014 : Info: [suffix] No '@' in User-Name = "test", looking up realm NULL Thu Mar 27 21:38:07 2014 : Info: [suffix] No such realm "NULL" Thu Mar 27 21:38:07 2014 : Info: ++[suffix] returns noop Thu Mar 27 21:38:07 2014 : Info: ++[files] returns noop Thu Mar 27 21:38:07 2014 : Info: # Executing section accounting from file /etc/f reeradius/sites-enabled/default Thu Mar 27 21:38:07 2014 : Info: +- entering group accounting {...} Thu Mar 27 21:38:07 2014 : Info: [detail] expand: /var/log/freeradius/rada cct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/ detail-20140327 Thu Mar 27 21:38:07 2014 : Info: [detail] /var/log/freeradius/radacct/%{Client-I P-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail -20140327 Thu Mar 27 21:38:07 2014 : Info: [detail] expand: %t -> Thu Mar 27 21:38:0 7 2014 Thu Mar 27 21:38:07 2014 : Info: ++[detail] returns ok Thu Mar 27 21:38:07 2014 : Info: ++[unix] returns ok Thu Mar 27 21:38:07 2014 : Info: [radutmp] expand: /var/log/freeradius/radu tmp -> /var/log/freeradius/radutmp Thu Mar 27 21:38:07 2014 : Info: [radutmp] expand: %{User-Name} -> test Thu Mar 27 21:38:07 2014 : Info: ++[radutmp] returns ok Thu Mar 27 21:38:07 2014 : Info: [sql] expand: %{User-Name} -> test Thu Mar 27 21:38:07 2014 : Info: [sql] sql_set_user escaped user --> 'test' Thu Mar 27 21:38:07 2014 : Info: [sql] expand: %{Acct-Delay-Time} -> Thu Mar 27 21:38:07 2014 : Info: [sql] ... expanding second conditional Thu Mar 27 21:38:07 2014 : Info: [sql] expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstartti me, acctstoptime, acctsessiontime, acctauthentic, connectinf o_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, se rvicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct- Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Por t-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Stati on-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP- Address}', Thu Mar 27 21:38:07 2014 : Debug: rlm_sql (sql): Reserving sql socket id: 3 Thu Mar 27 21:38:07 2014 : Debug: rlm_sql (sql): Released sql socket id: 3 Thu Mar 27 21:38:07 2014 : Info: ++[sql] returns ok Thu Mar 27 21:38:07 2014 : Info: ++[exec] returns noop Thu Mar 27 21:38:07 2014 : Info: [attr_filter.accounting_response] expand: %{User-Name} -> test Thu Mar 27 21:38:07 2014 : Debug: attr_filter: Matched entry DEFAULT at line 12 Thu Mar 27 21:38:07 2014 : Info: ++[attr_filter.accounting_response] returns upd ated Sending Accounting-Response of id 63 to 127.0.0.1 port 39179 Thu Mar 27 21:38:07 2014 : Info: Finished request 6. Thu Mar 27 21:38:07 2014 : Info: Cleaning up request 6 ID 63 with timestamp +276 Thu Mar 27 21:38:07 2014 : Debug: Going to the next request Thu Mar 27 21:38:07 2014 : Debug: Waking up in 4.9 seconds. Thu Mar 27 21:38:12 2014 : Info: Cleaning up request 5 ID 89 with timestamp +276 Thu Mar 27 21:38:12 2014 : Info: Ready to process requests.

3 2

Re: CPU intensize authorization module issue
by Stefan Winter 27 Mar '14

27 Mar '14

Hi, this is a usage question, redirecting to -users. You should call your module only in innner-tunnel/authorize, not in the outer request (default/authorize). Greetings, Stefan Winter On 27.03.2014 13:53, Yannick Koehler wrote: > Hi, > > I have an authorization module to write for FreeRADIUS that does a > fair amount of CPU intensive SQL queries 1-2 seconds time. But the > problem is that when a 802.1x authentication is occuring this event > occurs many times 4-5 times at each reception of RADIUS Access Request. > Also, at that time the username is not the final one (normally the final > one is sent within the MSCHAPv2 from within the TLS tunnel used by PEAP > or EAP-TLS or EAP-TTLS). > > Is there a way for my authorization module to trigger the work to be > done only if EAP is at the stage of handling the internal > authentication? Can for example my module communicate with the EAP > module and look at an internal flag somewhere to know if the TLS tunnel > has been completed? > > I would like the following: > > Access Request (EAP identity response) -> authorization module - no > CPU intensive > <-- Access Challenge (EAP TLS Server Hello) > > Access Request (EAP TLS Client Hello) -> authorization module - no > CPU intensive > <-- Access Challenge > > etc. until TLS is established > > Access Request (EAP TLS MSCHAPv2) -> authorization module - CPU > intensive query > <-- Access Accept > > -- > Yannick Koehler > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html > -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

3 7

RE: FR3.0.1Problems with raddebug and radmin
by Palmer J.D.F. 27 Mar '14

27 Mar '14

Hi Alan, I'm having problems with raddebug/radmin in FR3.0.2, which seem more terminal than before. When running radmin I get the error message below, this occurs regardless of whether radiusd is running. It appears to be failing on the if conditions within ./raddb/policy.d/eap # ./build/bin/local/radmin -u testuser(a)swan.ac.uk Thu Mar 27 10:55:00 2014 : Error: /usr/local/etc/raddb/policy.d/eap[10]: Parse error in condition radmin: Errors reading or parsing /usr/local/etc/raddb/radiusd.conf Usage: radmin [ args ] -d raddb_dir Configuration files are in "raddbdir/*". -e command Execute 'command' and then exit. -E Echo commands as they are being executed. -f socket_file Open socket_file directly, without reading radius.conf -h Print usage help information. -i input_file Read commands from 'input_file'. -n name Read raddb/name.conf instead of raddb/radiusd.conf -o output_file Write commands to 'output_file'. -q Quiet mode. Any ideas? Thanks, Jezz. > -----Original Message----- > From: freeradius-users- > bounces+j.d.f.palmer=swansea.ac.uk(a)lists.freeradius.org [mailto:freeradius- > users-bounces+j.d.f.palmer=swansea.ac.uk(a)lists.freeradius.org] On Behalf Of > Alan DeKok > Sent: 27 February 2014 13:34 > To: FreeRadius users mailing list > Subject: Re: FR3.0.1Problems with raddebug and radmin. > > Palmer J.D.F. wrote: > > But I'm still struggling with raddebug. > > It looks like the condition is having an issue escaping the "'s which > > have been introduced in FR3* > > This has been fixed in the v3.0.x branch. > > > However, if I hack the raddebug script and change the line... > > u) condition="(User-Name == $OPTARG )" > > to > > u) condition="(User-Name == \\\"$OPTARG\\\")" > > > > raddebug -u bob@bobville works as expected > > A different fix has already been pushed. We're doing some last-minute testing, > and hope to release v3.0.2 soon. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

rlm_rest JSON format for multiple attributes
by Werner Stucky 27 Mar '14

27 Mar '14

Hi Guys I've ran into a problem with rlm_rest and specifying VPs with JSON. I need to return multiple Framed-Route attributes. So now I have : {'Framed-Route':'1.2.3.4/32'} I can't add any additional Framed-Route attributes because the JSON format is a set of key value pairs and the key is unique. >From RFC4627: --------------- An object structure is represented as a pair of curly brackets surrounding zero or more name/value pairs (or members). A name is a string. A single colon comes after each name, separating the name from the value. A single comma separates a value from a following name. *The names within an object SHOULD be unique.---------------* Is there a way to support an array of values? eg. {'Framed-Route':['1.2.3.4/32','5.6.7.8/32']} Thank you Werner Stucky

2 7

freeradius3 authorize_group_check_query/ authorize_group_reply_query don't start
by George Koulyabin 27 Mar '14

27 Mar '14

Hi. I'm using FreeRADIUS 3.0.1 The authorize_group_check_query/ authorize_group_reply_query don't start. Listing of authorizize section: authorize { # filter_username preprocess auth_log chap mschap pap digest suffix # unix # files -sql # daily expiration logintime } DEBUG output: Skipping... Loaded module rlm_sql Skipping... read_groups = yes Skipping... authorize_group_check_query = "SELECT id, GroupName, Attribute, Value, op FROM radius.radgroupcheck WHERE GroupName = '%{Sql-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, GroupName, Attribute, Value, op FROM radius.radgroupreply WHERE GroupName = '%{Sql-Group}' ORDER BY id" group_membership_query = "SELECT GroupName FROM radius.radusergroup WHERE UserName='%{User-Name}' ORDER BY priority" Skipping... (0) sql : User found in radreply table (0) sql : expand: "SELECT GroupName FROM radius.radusergroup WHERE UserName='%{User-Name}' ORDER BY priority" -> 'SELECT GroupName FROM radius.radusergroup WHERE UserName='test' ORDER BY priority' rlm_sql (sql): Executing query: 'SELECT GroupName FROM radius.radusergroup WHERE UserName='test' ORDER BY priority' rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: query affected rows = 1 , fields = 1 rlm_sql (sql): Released connection (2) rlm_sql (sql): Closing connection (1): Hit idle_timeout, was idle for 881 seconds rlm_sql_postgresql: Socket destructor called, closing socket rlm_sql (sql): Closing connection (0): Hit idle_timeout, was idle for 881 seconds rlm_sql (sql): You probably need to lower "min" rlm_sql_postgresql: Socket destructor called, closing socket (0) [-sql] = ok (0) [expiration] = noop (0) [logintime] = noop (0) } # authorize = ok ... End of DEBUG OUTPUT What's wrong? Why didn't authorize_group_check_query/ authorize_group_reply_query start? I tried to add Fall-Through = Yes to radreply for this user. Unsuccessfully. Thanks.

2 1

IP-Address
by Bruce Richardson 26 Mar '14

26 Mar '14

Hi, I have been using freeradius for many years now to authenticate WiFi users against active directory, and it all works perfectly. I am now trying to integrate it with the identity awareness built into our Checkpoint firewall system, this is able to take radius authentication packets and build a list of users against IP addresses. I understand that you can replicate the accounting data on from freeradius but for this to work obviously the WiFi client's IP address needs to be in the radius accounting data. At the moment it isn't because at the point when the accounting data is sent the client has not yet sent its DHCP request. Am I correct that to get the IP address into the radius accounting the freeradius server needs to be configured to send out the IP addresses rather than different DHCP server. If this is correct, could I create different IP pools to be used for each site, and have the correct IP data sent out for for different sets of wifi access points (NAS). Many thanks for reading this, I just want know I am going in the correct direction. Regards, Bruce Richardson -- This e-mail and any attachments are confidential and solely for the use of the intended recipient. They may contain material protected by legal professional or other privilege. If you receive it in error, please delete it from your system, make no copies of it, do not disclose its contents to any third party or use it for your own or any other person's benefit. Please advise the sender of its receipt as soon as possible. Although this email and its attachments are believed to be free of any virus or other defect, it is the responsibility of the recipient to ensure that they are virus free and no responsibility is accepted by the company for any loss or damage arising from receipt or use thereof. Any opinions expressed that do not relate to the official business of the company are those of the author, not the United Biscuits group of companies. United Biscuits (UK) Limited Registered in England number 2506007 Registered Office: Hayes Park, Hayes End Road, Hayes, Middlesex, UB4 8EE

9 25

Version 3.0.2 has been released
by Alan DeKok 26 Mar '14

26 Mar '14

ChangeLog here: http://freeradius.org/version3.html There have been a large number of minor bug fixes, and a few major ones. The major ones caused the delay of the release. There are a number of useful new features. The "unpack" module will help deal with vendors who pack multiple fields into one attribute. Secrets and passwords to databases are no longer printed in debugging mode. DHCP has been updated for sqlite. "unlang" is getting smarter. The goal for 3.0.3 is to more compile-time optimizations. e.g. update reply { Filter-ID := "%{sql: ...}" } Right now, the string "%{sql: ...}" is parsed at run-time for every request. This is slow, and means that we can't do syntax checks when the server starts. For 3.0.3, dynamically expanded strings will be checked when the server starts. update reply { Filter-ID := "%{no_such_module: ...}" } In 3.0.2, the server will start, and you will see run-time failures, when the expansion doesn't exist. In 3.0.3, the server will refuse to start, as the configuration is wrong. Alan DeKok.

2 2

LDAP and/or Active Directory
by David Peterson 26 Mar '14

26 Mar '14

I have a WiMax customer who would like to authorize against an Active directory server. I noticed in the inner-tunnel config it says that the Auth-Type LDAP means that EAP won't work. Am I misunderstanding how to properly set up LDAP? Or would the active directory set up be better for an authorization requiring EAP-TTLS. David

6 9

DHCPv6 support
by Nikolaos Milas 26 Mar '14

26 Mar '14

Hi, Are there any plans to provide DHCPv6 functionality any time soon? All the best, Nick

5 6

Re: IP-Address
by Bruce Richardson 26 Mar '14

26 Mar '14

Hi, thanks for all the replies to my query. They have helped me understand the problem and backed up what I already knew. Hopefully others will find the thread useful in the future. After having another in-depth look at it yesterday I have come to the conclusion that the elderly Cisco WiFi APs I am using are just too old to support all the features needed. Annoyingly the AP does know what the IP address is because you can see it on the connections table, but it refuses to paste it into the accounting data. I've tried various commands to force it. I have proved it can work because I have some Aerohive test kit that works perfectly. Freeradius passes the data to Checkpoint and the correct identity awareness is set up correctly. Thanks again Bruce. -- This e-mail and any attachments are confidential and solely for the use of the intended recipient. They may contain material protected by legal professional or other privilege. If you receive it in error, please delete it from your system, make no copies of it, do not disclose its contents to any third party or use it for your own or any other person's benefit. Please advise the sender of its receipt as soon as possible. Although this email and its attachments are believed to be free of any virus or other defect, it is the responsibility of the recipient to ensure that they are virus free and no responsibility is accepted by the company for any loss or damage arising from receipt or use thereof. Any opinions expressed that do not relate to the official business of the company are those of the author, not the United Biscuits group of companies. United Biscuits (UK) Limited Registered in England number 2506007 Registered Office: Hayes Park, Hayes End Road, Hayes, Middlesex, UB4 8EE

1 0