Listening on authentication address * port 1812 Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 192.168.1.93 port 2048, id=0, length=167 User-Name = "koshikov.n@agromat.intranet" NAS-IP-Address = 192.168.1.93 Called-Station-Id = "687f7402229e" Calling-Station-Id = "001b77a5bd59" NAS-Identifier = "687f7402229e" NAS-Port = 1 Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x02000020016b6f7368696b6f762e6e406167726f6d61742e696e7472616e6574 Message-Authenticator = 0x6f74a60a7122ce86332f6c12f0a58b2d +- entering group authorize {...} ++[mschap] returns noop [ntdomain] No '\' in User-Name = "koshikov.n@agromat.intranet", looking up realm NULL [ntdomain] Found realm "DEFAULT" [ntdomain] Adding Stripped-User-Name = "koshikov.n@agromat.intranet" [ntdomain] Adding Realm = "DEFAULT" [ntdomain] Authentication realm is LOCAL. ++[ntdomain] returns ok ++[control] returns ok [eap] EAP packet type response id 0 length 32 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] EAP Identity [eap] processing type tls [tls] Requiring client certificate [tls] Initiate [tls] Start returned 1 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.1.93 port 2048 EAP-Message = 0x010100060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x786df611786cfbdfbe03eb20394d9de8 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.1.93 port 2048, id=0, length=268 Cleaning up request 0 ID 0 with timestamp +68 User-Name = "koshikov.n@agromat.intranet" NAS-IP-Address = 192.168.1.93 Called-Station-Id = "687f7402229e" Calling-Station-Id = "001b77a5bd59" NAS-Identifier = "687f7402229e" NAS-Port = 1 Framed-MTU = 1400 State = 0x786df611786cfbdfbe03eb20394d9de8 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020100730d0016030100680100006403014bf294593869f0b3c6ba07bdbab4f8f7e11c90272123ba06c112aab00e4c566600003600390038003500880087008400160013000a00330032002f0045004400410007000500040015001200090014001100080006000300ff020100000400230000 Message-Authenticator = 0x6673f5d5a5defa94fe83c73a1ac3db12 +- entering group authorize {...} ++[mschap] returns noop [ntdomain] No '\' in User-Name = "koshikov.n@agromat.intranet", looking up realm NULL [ntdomain] Found realm "DEFAULT" [ntdomain] Adding Stripped-User-Name = "koshikov.n@agromat.intranet" [ntdomain] Adding Realm = "DEFAULT" [ntdomain] Authentication realm is LOCAL. ++[ntdomain] returns ok ++[control] returns ok [eap] EAP packet type response id 1 length 115 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] eaptls_verify returned 7 [tls] Done initial handshake [tls] (other): before/accept initialization [tls] TLS_accept: before/accept initialization [tls] <<< TLS 1.0 Handshake [length 0068], ClientHello [tls] TLS_accept: SSLv3 read client hello A [tls] >>> TLS 1.0 Handshake [length 002a], ServerHello [tls] TLS_accept: SSLv3 write server hello A [tls] >>> TLS 1.0 Handshake [length 128e], Certificate [tls] TLS_accept: SSLv3 write certificate A [tls] >>> TLS 1.0 Handshake [length 018d], ServerKeyExchange [tls] TLS_accept: SSLv3 write key exchange A [tls] >>> TLS 1.0 Handshake [length 007d], CertificateRequest [tls] TLS_accept: SSLv3 write certificate request A [tls] TLS_accept: SSLv3 flush data [tls] TLS_accept: Need to read more data: SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.1.93 port 2048 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x5486c4c215020164020107301f0603551d23041830168014f49ad0f675874ed46461c8386edc0b3b2565c38a308201120603551d1f048201093082010530820101a081fea081fb8637687474703a2f2f62656c2d63612d312e6167726f6d61742e696e7472616e65742f4167726f6d617425323053756225323043412e63726c8681bf6c6461703a2f2f2f434e3d4167726f6d617425323053756225323043412c434e3d42454c2d43412d312c434e3d4344502c434e3d5075626c69632532304b657925323053657276696365732c434e3d53657276696365732c434e3d436f6e66696775726174696f6e2c44433d6167726f6d61742c44433d696e74 EAP-Message = 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 EAP-Message = 0x792532305365727669636573 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x786df611796ffbdfbe03eb20394d9de8 Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.1.93 port 2048, id=0, length=159 Cleaning up request 1 ID 0 with timestamp +68 User-Name = "koshikov.n@agromat.intranet" NAS-IP-Address = 192.168.1.93 Called-Station-Id = "687f7402229e" Calling-Station-Id = "001b77a5bd59" NAS-Identifier = "687f7402229e" NAS-Port = 1 Framed-MTU = 1400 State = 0x786df611796ffbdfbe03eb20394d9de8 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020200060d00 Message-Authenticator = 0xad8d7b62d603986942c64369e18f7279 +- entering group authorize {...} ++[mschap] returns noop [ntdomain] No '\' in User-Name = "koshikov.n@agromat.intranet", looking up realm NULL [ntdomain] Found realm "DEFAULT" [ntdomain] Adding Stripped-User-Name = "koshikov.n@agromat.intranet" [ntdomain] Adding Realm = "DEFAULT" [ntdomain] Authentication realm is LOCAL. ++[ntdomain] returns ok ++[control] returns ok [eap] EAP packet type response id 2 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake fragment handler [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.1.93 port 2048 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x526f6f74204341301e170d3039303830373134303531395a170d3139303830373134313531395a304c31183016060a0992268993f22c6401191608696e7472616e657431173015060a0992268993f22c64011916076167726f6d6174311730150603550403130e4167726f6d61742053756220434130820122300d06092a864886f70d01010105000382010f003082010a02820101009bacff278a4b8c96d3ae0f9ca0fddca218921f5e62f325f2d7ae8519f7ae61260f87bc1c146188bfa2ee836c820f48983f189d0d0398f04334a9a888fbcc737b9d7b40fd6b9f76c3aa1ad570bc43ede66c92ad4c615b6a431d8d530180b8af1048111fd7484642 EAP-Message = 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 EAP-Message = 0x200482014430820140308198 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x786df6117a6efbdfbe03eb20394d9de8 Finished request 2. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.1.93 port 2048, id=0, length=159 Cleaning up request 2 ID 0 with timestamp +68 User-Name = "koshikov.n@agromat.intranet" NAS-IP-Address = 192.168.1.93 Called-Station-Id = "687f7402229e" Calling-Station-Id = "001b77a5bd59" NAS-Identifier = "687f7402229e" NAS-Port = 1 Framed-MTU = 1400 State = 0x786df6117a6efbdfbe03eb20394d9de8 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020300060d00 Message-Authenticator = 0x1f0c20c6db20ff19a845b6e48ce4c648 +- entering group authorize {...} ++[mschap] returns noop [ntdomain] No '\' in User-Name = "koshikov.n@agromat.intranet", looking up realm NULL [ntdomain] Found realm "DEFAULT" [ntdomain] Adding Stripped-User-Name = "koshikov.n@agromat.intranet" [ntdomain] Adding Realm = "DEFAULT" [ntdomain] Authentication realm is LOCAL. ++[ntdomain] returns ok ++[control] returns ok [eap] EAP packet type response id 3 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake fragment handler [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.1.93 port 2048 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x434e3d524f4f5443412c434e3d4344502c434e3d5075626c69632532304b657925323053657276696365732c434e3d53657276696365732c434e3d436f6e66696775726174696f6e2c44433d4147524f4d41542c44433d494e5452414e45543f63657274696669636174655265766f636174696f6e4c6973743f626173653f6f626a656374436c6173733d63524c446973747269627574696f6e506f696e743082011906082b060105050701010482010b30820107304b06082b06010505073002863f687474703a2f2f62656c2d63612d312e6167726f6d61742e696e7472616e65742f524f4f5443415f4167726f6d6174253230526f6f7425323043 EAP-Message = 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 EAP-Message = 0xb48b4a67c385d704f48fd1cd Message-Authenticator = 0x00000000000000000000000000000000 State = 0x786df6117b69fbdfbe03eb20394d9de8 Finished request 3. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.1.93 port 2048, id=0, length=159 Cleaning up request 3 ID 0 with timestamp +68 User-Name = "koshikov.n@agromat.intranet" NAS-IP-Address = 192.168.1.93 Called-Station-Id = "687f7402229e" Calling-Station-Id = "001b77a5bd59" NAS-Identifier = "687f7402229e" NAS-Port = 1 Framed-MTU = 1400 State = 0x786df6117b69fbdfbe03eb20394d9de8 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020400060d00 Message-Authenticator = 0x1416eb2d42839d24957d24b937a4e437 +- entering group authorize {...} ++[mschap] returns noop [ntdomain] No '\' in User-Name = "koshikov.n@agromat.intranet", looking up realm NULL [ntdomain] Found realm "DEFAULT" [ntdomain] Adding Stripped-User-Name = "koshikov.n@agromat.intranet" [ntdomain] Adding Realm = "DEFAULT" [ntdomain] Authentication realm is LOCAL. ++[ntdomain] returns ok ++[control] returns ok [eap] EAP packet type response id 4 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake fragment handler [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.1.93 port 2048 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x309d41d7997ce68f8dfd1025 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x786df6117c68fbdfbe03eb20394d9de8 Finished request 4. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.1.93 port 2048, id=0, length=159 Cleaning up request 4 ID 0 with timestamp +68 User-Name = "koshikov.n@agromat.intranet" NAS-IP-Address = 192.168.1.93 Called-Station-Id = "687f7402229e" Calling-Station-Id = "001b77a5bd59" NAS-Identifier = "687f7402229e" NAS-Port = 1 Framed-MTU = 1400 State = 0x786df6117c68fbdfbe03eb20394d9de8 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020500060d00 Message-Authenticator = 0x03a9f276da336d80e234750749f2cd0d +- entering group authorize {...} ++[mschap] returns noop [ntdomain] No '\' in User-Name = "koshikov.n@agromat.intranet", looking up realm NULL [ntdomain] Found realm "DEFAULT" [ntdomain] Adding Stripped-User-Name = "koshikov.n@agromat.intranet" [ntdomain] Adding Realm = "DEFAULT" [ntdomain] Authentication realm is LOCAL. ++[ntdomain] returns ok ++[control] returns ok [eap] EAP packet type response id 5 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake fragment handler [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.1.93 port 2048 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6a25099aec9397903ad75be5 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x786df6117d6bfbdfbe03eb20394d9de8 Finished request 5. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.1.93 port 2048, id=0, length=159 Cleaning up request 5 ID 0 with timestamp +68 User-Name = "koshikov.n@agromat.intranet" NAS-IP-Address = 192.168.1.93 Called-Station-Id = "687f7402229e" Calling-Station-Id = "001b77a5bd59" NAS-Identifier = "687f7402229e" NAS-Port = 1 Framed-MTU = 1400 State = 0x786df6117d6bfbdfbe03eb20394d9de8 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020600060d00 Message-Authenticator = 0xb5e25bb3edd80b82e6d67c1cebb8d0e2 +- entering group authorize {...} ++[mschap] returns noop [ntdomain] No '\' in User-Name = "koshikov.n@agromat.intranet", looking up realm NULL [ntdomain] Found realm "DEFAULT" [ntdomain] Adding Stripped-User-Name = "koshikov.n@agromat.intranet" [ntdomain] Adding Realm = "DEFAULT" [ntdomain] Authentication realm is LOCAL. ++[ntdomain] returns ok ++[control] returns ok [eap] EAP packet type response id 6 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake fragment handler [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.1.93 port 2048 EAP-Message = 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 EAP-Message = 0x130f4167726f6d617420526f6f742043410e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x786df6117e6afbdfbe03eb20394d9de8 Finished request 6. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.1.93 port 2048, id=0, length=166 Cleaning up request 6 ID 0 with timestamp +68 User-Name = "koshikov.n@agromat.intranet" NAS-IP-Address = 192.168.1.93 Called-Station-Id = "687f7402229e" Calling-Station-Id = "001b77a5bd59" NAS-Identifier = "687f7402229e" NAS-Port = 1 Framed-MTU = 1400 State = 0x786df6117e6afbdfbe03eb20394d9de8 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0207000d0d0015030100020230 Message-Authenticator = 0x932dead015ec8451b3015f5e9cc5d80e +- entering group authorize {...} ++[mschap] returns noop [ntdomain] No '\' in User-Name = "koshikov.n@agromat.intranet", looking up realm NULL [ntdomain] Found realm "DEFAULT" [ntdomain] Adding Stripped-User-Name = "koshikov.n@agromat.intranet" [ntdomain] Adding Realm = "DEFAULT" [ntdomain] Authentication realm is LOCAL. ++[ntdomain] returns ok ++[control] returns ok [eap] EAP packet type response id 7 length 13 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] eaptls_verify returned 7 [tls] Done initial handshake [tls] <<< TLS 1.0 Alert [length 0002], fatal unknown_ca TLS Alert read:fatal:unknown CA TLS_accept:failed in SSLv3 read client certificate A rlm_eap: SSL error error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca SSL: SSL_read failed inside of TLS (-1), TLS session fails. TLS receive handshake failed during operation [tls] eaptls_process returned 4 [eap] Handler failed in EAP/tls [eap] Failed in EAP select ++[eap] returns invalid Failed to authenticate the user. Login incorrect: [koshikov.n@agromat.intranet/] (from client local-net port 1 cli 001b77a5bd59) Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> koshikov.n@agromat.intranet attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 7 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 7 Sending Access-Reject of id 0 to 192.168.1.93 port 2048 EAP-Message = 0x04070004 Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 4.9 seconds.