Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 192.168.1.99:41097, id=22, length=184 User-Name = "false_user" NAS-IP-Address = 192.168.1.99 NAS-Identifier = "nas-wired.wbunker.local" NAS-Port = 0 Called-Station-Id = "02-7F-6F-81-13-80:testnet" Calling-Station-Id = "02-FE-9D-A5-4F-F8" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11" EAP-Message = 0x0200000f0166616c73655f75736572 Message-Authenticator = 0x19659daa59272d46bee25f4aa2de3bf8 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 radius_xlat: '/var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119 modcall[authorize]: module "auth_log" returns ok for request 0 rlm_eap: EAP packet type response id 0 length 15 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 0 modcall: leaving group authenticate (returns handled) for request 0 Sending Access-Challenge of id 22 to 192.168.1.99 port 41097 EAP-Message = 0x010100060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbf9662269689d96b2c75766aa57fb010 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.99:41097, id=23, length=280 User-Name = "false_user" NAS-IP-Address = 192.168.1.99 NAS-Identifier = "nas-wired.wbunker.local" NAS-Port = 0 Called-Station-Id = "02-7F-6F-81-13-80:testnet" Calling-Station-Id = "02-FE-9D-A5-4F-F8" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11" EAP-Message = 0x0201005d0d0016030100520100004e030145b10261d5e74f1777b17a108ce3989a27791cf5cec0f3247aa8098eaf7f7ce700002600390038003500160013000a00330032002f0005000400150012000900140011000800060003020100 State = 0xbf9662269689d96b2c75766aa57fb010 Message-Authenticator = 0xcfb5629d988d1e7daee86102abe7f530 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 radius_xlat: '/var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119 modcall[authorize]: module "auth_log" returns ok for request 1 rlm_eap: EAP packet type response id 1 length 93 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 1 modcall: leaving group authorize (returns updated) for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0052], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 08fb], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0063], CertificateRequest TLS_accept: SSLv3 write certificate request A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 1 modcall: leaving group authenticate (returns handled) for request 1 Sending Access-Challenge of id 23 to 192.168.1.99 port 41097 EAP-Message = 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 EAP-Message = 0x353833345a3059310b30090603550406130244453110300e060355040a13077762756e6b657231143012060355040b130b7365727665727a65756368312230200603550403131968617570746162616b75732e7762756e6b65722e6c6f63616c30820122300d06092a864886f70d01010105000382010f003082010a0282010100c0db68fce76461600b214f6dfe139d8dc2dbe79f538d2efce4a7148fe7d44e732be5dd2a8832a8dbbea46bd127c735899016eb37bf63b370a4682cbef7257868f47f38f73a21dee8e41791e2b33d04d80cef6db9e50c585ab3c455686f8a3de457fbc23babe71307c64e3806b3514a6de659435b5003bca5251816a6 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x65bf5425becbc026348f67eb578badef278fab48e332 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x84f9b7d03f2ad755b1760b6fb9d66018 Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.99:41097, id=24, length=193 User-Name = "false_user" NAS-IP-Address = 192.168.1.99 NAS-Identifier = "nas-wired.wbunker.local" NAS-Port = 0 Called-Station-Id = "02-7F-6F-81-13-80:testnet" Calling-Station-Id = "02-FE-9D-A5-4F-F8" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11" EAP-Message = 0x020200060d00 State = 0x84f9b7d03f2ad755b1760b6fb9d66018 Message-Authenticator = 0x01e47313070fe38db51c35d663fb1dfe Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 radius_xlat: '/var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119 modcall[authorize]: module "auth_log" returns ok for request 2 rlm_eap: EAP packet type response id 2 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 2 modcall: leaving group authorize (returns updated) for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: leaving group authenticate (returns handled) for request 2 Sending Access-Challenge of id 24 to 192.168.1.99 port 41097 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0f003082010a0282010100a39ebac2b908fb1158d603ac194bd65f513c2a88cf9f31467a48d08d0cae57b34ac90a4cec9590d161f0436c368450f7e3897b660aab3662a902c5ca830a969e1b9792a18c77b8c20e656aed76653865b937aa3fb2e88d0b6a479938bebbba8fc3d62c9de1b916475f9f890d1b164d995f222b288d472b5063a889eb4380d8024cce34effab0153f16e2ae8ecf9bfbdfc369468cbf4c3858f7ff0f3a9b4dfcfe5c6377123ae74c550c23ccbc1ba611de578ac61f922d03682d5166e2578e446d6dee550aee7b571b5b5a9024f14637602456e316d8e35f44b629f83849c92756232f82eb6572ed3413b8ac95d4cf4ea9aee5 EAP-Message = 0x5df40a3ed549c083b5b1dd72de130203010001a382013730820133301d0603551d0e04160414e5d98830bdb91eacf138209bb99a16fc5e975ff93081810603551d23047a30788014e5d98830bdb91eacf138209bb99a16fc5e975ff9a155a4533051310b30090603550406130244453110300e060355040a13077762756e6b657231163014060355040b130d7762756e6b65722061646d696e311830160603550403130f7762756e6b657220726f6f742043418209008b4a54cfa8e1ea9530120603551d130101ff040830060101ff020101300b0603551d0f040403020106301106096086480186f8420101040403020106302c0603551d1104253023 EAP-Message = 0x81216a616e69746f724068617570746162616b75732e Message-Authenticator = 0x00000000000000000000000000000000 State = 0x49624b7fe0666adeb9c76313e92759e3 Finished request 2 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.99:41097, id=25, length=193 User-Name = "false_user" NAS-IP-Address = 192.168.1.99 NAS-Identifier = "nas-wired.wbunker.local" NAS-Port = 0 Called-Station-Id = "02-7F-6F-81-13-80:testnet" Calling-Station-Id = "02-FE-9D-A5-4F-F8" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11" EAP-Message = 0x020300060d00 State = 0x49624b7fe0666adeb9c76313e92759e3 Message-Authenticator = 0xf4b23cfe38daa7fc112ce4e489717da8 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 radius_xlat: '/var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119 modcall[authorize]: module "auth_log" returns ok for request 3 rlm_eap: EAP packet type response id 3 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 3 modcall: leaving group authorize (returns updated) for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: leaving group authenticate (returns handled) for request 3 Sending Access-Challenge of id 25 to 192.168.1.99 port 41097 EAP-Message = 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 EAP-Message = 0xa2c05e2898b50eff92671a53697fcc78fccf1a6b984f653e0b26c4b3b466eb494b5cda29ec7d6e64cefcbbb98f5a418c725e0a7aafb23ef6754e03f2a778d5097154dc3ef03d2a2d8adc8a6c2307ffc5cc3d027680ff645f129a88cb16030100630d00005b03010240005500533051310b30090603550406130244453110300e060355040a13077762756e6b657231163014060355040b130d7762756e6b65722061646d696e311830160603550403130f7762756e6b657220726f6f742043410e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x9177458b6403334e16c904e068db9c8b Finished request 3 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.99:41097, id=26, length=1605 User-Name = "false_user" NAS-IP-Address = 192.168.1.99 NAS-Identifier = "nas-wired.wbunker.local" NAS-Port = 0 Called-Station-Id = "02-7F-6F-81-13-80:testnet" Calling-Station-Id = "02-FE-9D-A5-4F-F8" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11" EAP-Message = 0x020405800dc000000b1b16030108c50b0008c10008be00044a308204463082032ea0030201020209008b4a54cfa8e1ea9d300d06092a864886f70d0101050500305d310b30090603550406130244453110300e060355040a13077762756e6b6572311c301a060355040b13137762756e6b6572206461752073657276696365311e301c060355040313157762756e6b657220726164697573206c7573657273301e170d3036303730383036323331355a170d3037303730383036323331355a303b310b30090603550406130244453110300e060355040a13077762756e6b6572310c300a060355040b1303646175310c300a0603550403130377626830 EAP-Message = 0x820122300d06092a864886f70d01010105000382010f003082010a0282010100ba2ad065c7bb7c42038dcbf95d203e9fb4dc90847538be74c60739e4202bd2ee2e9a9dc886e935f30ef5400c2b90013c40df390ad37513b5e0cc23b80a26beeb8d7683e006d4b44393494aab6c0668e460f81b0a3586b90d073235607eba0d1df1d53c0378e1e1c8bebf61d49860684687a4512143ab555c4f27b45bf543d54ee005a9d50f23f19204142f8fc3b049fd6a9b863e5e22346f4eaaccbceef6620152748eb96af3d2b919aff2d43725944fc28be96ccfd0934cb3191f9d4447e360782f6c638497eb75820920274410aa2346c2fabd1a46019de2f1781648 EAP-Message = 0x99c94de951e2f37295eb9ac5d53beee29328ad6cd308f52b065a9fa2a4c1b04a89f2990203010001a382012930820125301d0603551d0e04160414d7a599637dbeb2187f475dd89c1f278f419fbd633081810603551d23047a30788014a541f79ea929eb83a5c335b52eedbbc2f6c674a5a155a4533051310b30090603550406130244453110300e060355040a13077762756e6b657231163014060355040b130d7762756e6b65722061646d696e311830160603550403130f7762756e6b657220726f6f742043418209008b4a54cfa8e1ea9b300c0603551d130101ff04023000300b0603551d0f0404030205e0301106096086480186f84201010404 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x170d3038303630333035343230385a305d310b30090603550406130244453110300e060355040a13077762756e6b6572311c301a060355040b13137762756e6b6572206461752073657276696365311e301c060355040313157762756e6b657220726164697573206c757365727330820122300d06092a864886f70d01010105000382010f003082010a0282010100 State = 0x9177458b6403334e16c904e068db9c8b Message-Authenticator = 0x93d86b92661a2cfeff0dd52e9c0e44f3 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 radius_xlat: '/var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119 modcall[authorize]: module "auth_log" returns ok for request 4 rlm_eap: EAP packet type response id 4 length 253 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 4 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 4 modcall: leaving group authorize (returns updated) for request 4 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 4 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS First Fragment of the message eaptls_verify returned 9 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 4 modcall: leaving group authenticate (returns handled) for request 4 Sending Access-Challenge of id 26 to 192.168.1.99 port 41097 EAP-Message = 0x010500060d00 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x538a6f34f1caf4f61c806af2856c43fb Finished request 4 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.99:41097, id=27, length=1601 User-Name = "false_user" NAS-IP-Address = 192.168.1.99 NAS-Identifier = "nas-wired.wbunker.local" NAS-Port = 0 Called-Station-Id = "02-7F-6F-81-13-80:testnet" Calling-Station-Id = "02-FE-9D-A5-4F-F8" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11" EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0017e07328c1abb94b03377a30db1fc3a013221ec91cf1ee380ed6ed33e12e3770ca2f8ae777c72762849f1a1443ecd62fc6b9997d8389bd03bc76853352348b1b7561289a7409bc92234a4b9103762f2f83c143ce2313602733797461f9adeca8b67a5334cac6ab5473a426030cec0b646207887e445219ee39124b14f2191403010001011603010030e1 State = 0x538a6f34f1caf4f61c806af2856c43fb Message-Authenticator = 0x43ea8aed3ab4d0b48fa923bb6e8f3b30 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 5 modcall[authorize]: module "preprocess" returns ok for request 5 radius_xlat: '/var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119 modcall[authorize]: module "auth_log" returns ok for request 5 rlm_eap: EAP packet type response id 5 length 253 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 5 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 5 modcall: leaving group authorize (returns updated) for request 5 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 5 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: More fragments to follow eaptls_verify returned 10 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 5 modcall: leaving group authenticate (returns handled) for request 5 Sending Access-Challenge of id 27 to 192.168.1.99 port 41097 EAP-Message = 0x010600060d00 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x1adc658bc6c1bc6dc2e6532c9bcd1e87 Finished request 5 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.99:41097, id=28, length=240 User-Name = "false_user" NAS-IP-Address = 192.168.1.99 NAS-Identifier = "nas-wired.wbunker.local" NAS-Port = 0 Called-Station-Id = "02-7F-6F-81-13-80:testnet" Calling-Station-Id = "02-FE-9D-A5-4F-F8" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11" EAP-Message = 0x020600350d00cd6d4f5223e3020f1876c7d6b24394a4558c100991388d636b7f8e36988f073c031c1abae7a55ef58555d7bf003d49 State = 0x1adc658bc6c1bc6dc2e6532c9bcd1e87 Message-Authenticator = 0x7c81e4b3019813dd7b54f9527c1a3927 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 6 modcall[authorize]: module "preprocess" returns ok for request 6 radius_xlat: '/var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119 modcall[authorize]: module "auth_log" returns ok for request 6 rlm_eap: EAP packet type response id 6 length 53 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 6 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 6 modcall: leaving group authorize (returns updated) for request 6 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 6 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake rlm_eap_tls: <<< TLS 1.0 Handshake [length 08c5], Certificate chain-depth=2, error=0 --> User-Name = false_user --> BUF-Name = wbunker root CA --> subject = /C=DE/O=wbunker/OU=wbunker admin/CN=wbunker root CA --> issuer = /C=DE/O=wbunker/OU=wbunker admin/CN=wbunker root CA --> verify return:1 chain-depth=1, error=0 --> User-Name = false_user --> BUF-Name = wbunker radius lusers --> subject = /C=DE/O=wbunker/OU=wbunker dau service/CN=wbunker radius lusers --> issuer = /C=DE/O=wbunker/OU=wbunker admin/CN=wbunker root CA --> verify return:1 radius_xlat: 'yes' rlm_eap_tls: checking certificate CN (wbh) with xlat'ed value (yes) rlm_eap_tls: Certificate CN (wbh) does not match specified value (yes)! chain-depth=0, error=0 --> User-Name = false_user --> BUF-Name = wbh --> subject = /C=DE/O=wbunker/OU=dau/CN=wbh --> issuer = /C=DE/O=wbunker/OU=wbunker dau service/CN=wbunker radius lusers --> verify return:0 rlm_eap_tls: >>> TLS 1.0 Alert [length 0002], fatal certificate_unknown TLS Alert write:fatal:certificate unknown TLS_accept:error in SSLv3 read client certificate B rlm_eap: SSL error error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 6 modcall: leaving group authenticate (returns handled) for request 6 Sending Access-Challenge of id 28 to 192.168.1.99 port 41097 EAP-Message = 0x010700110d80000000071503010002022e Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4b8eca9f578fe08ba88ffdb32ff8677d Finished request 6 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.99:41097, id=29, length=193 User-Name = "false_user" NAS-IP-Address = 192.168.1.99 NAS-Identifier = "nas-wired.wbunker.local" NAS-Port = 0 Called-Station-Id = "02-7F-6F-81-13-80:testnet" Calling-Station-Id = "02-FE-9D-A5-4F-F8" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11" EAP-Message = 0x020700060d00 State = 0x4b8eca9f578fe08ba88ffdb32ff8677d Message-Authenticator = 0x67dd7c61591f941d459bce45aef8daa9 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 7 modcall[authorize]: module "preprocess" returns ok for request 7 radius_xlat: '/var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.1.99/auth-detail-20070119 modcall[authorize]: module "auth_log" returns ok for request 7 rlm_eap: EAP packet type response id 7 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 7 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 7 modcall: leaving group authorize (returns updated) for request 7 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 7 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack alert eaptls_verify returned 4 eaptls_process returned 4 rlm_eap: Handler failed in EAP/tls rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 7 modcall: leaving group authenticate (returns invalid) for request 7 auth: Failed to validate the user. Login incorrect: [false_user/] (from client dwl900 port 0 cli 02-FE-9D-A5-4F-F8) Delaying request 7 for 1 seconds Finished request 7 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.99:41097, id=29, length=193 Sending Access-Reject of id 29 to 192.168.1.99 port 41097 EAP-Message = 0x04070004 Message-Authenticator = 0x00000000000000000000000000000000 --- Walking the entire request list --- Waking up in 3 seconds...