Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=93, length=188
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "SLO"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0xfd1259d8644db06a28f867fb5170932a
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x0201000801534c4f
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "SLO", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 1 length 8
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] No EAP Start, assuming it's an on-going EAP conversation
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = updated
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = updated
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: [pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = updated
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP Identity
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] processing type tls
Tue Feb 11 09:58:32 2014 : Debug: [tls] Initiate
Tue Feb 11 09:58:32 2014 : Debug: [tls] Start returned 1
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: Sending Access-Challenge packet to host 172.23.12.254 port 1645, id=93, length=0
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x010200061920
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x00000000000000000000000000000000
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1871106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug: Finished request 556178.
Tue Feb 11 09:58:32 2014 : Debug: Cleaning up request 556173 ID 88 with timestamp +1110040
Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=94, length=406
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "SLO"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x9b98b36962607e82e5ed45e7e35ecebd
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x020200d01980000000c616030100c1010000bd030152f983c975a7eb23dd5d25cdcce0726a3370e015223471536e7fe604640e05ea000054c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc002000500040015001200090014001100080006000300ff01000040000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f00100011
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1871106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "SLO", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 2 length 208
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Continuing tunnel setup.
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = ok
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP/peap
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] processing type peap
Tue Feb 11 09:58:32 2014 : Debug: [peap] processing EAP-TLS
Tue Feb 11 09:58:32 2014 : Debug: [peap] Length Included
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_verify returned 11
Tue Feb 11 09:58:32 2014 : Debug: [peap]     (other): before/accept initialization
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: before/accept initialization
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 read client hello A
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 write server hello A
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 write certificate A
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 write key exchange A
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 write server done A
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 flush data
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: Need to read more data: SSLv3 read client certificate A
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_process returned 13
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAPTLS_HANDLED
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: Sending Access-Challenge packet to host 172.23.12.254 port 1645, id=94, length=0
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 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
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 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
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 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
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 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
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x6c2f326368616e5f53617261
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x00000000000000000000000000000000
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1970106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug: Finished request 556179.
Tue Feb 11 09:58:32 2014 : Debug: Cleaning up request 556174 ID 89 with timestamp +1110040
Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=95, length=204
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "SLO"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x2ba20b722adf69648b31ec43c54bf6ab
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x020300061900
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1970106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "SLO", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 3 length 6
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Continuing tunnel setup.
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = ok
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP/peap
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] processing type peap
Tue Feb 11 09:58:32 2014 : Debug: [peap] processing EAP-TLS
Tue Feb 11 09:58:32 2014 : Debug: [peap] Received TLS ACK
Tue Feb 11 09:58:32 2014 : Debug: [peap] ACK handshake fragment handler
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_verify returned 1
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_process returned 13
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAPTLS_HANDLED
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: Sending Access-Challenge packet to host 172.23.12.254 port 1645, id=95, length=0
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 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
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 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
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 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
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 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
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x303aa038a0368634
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x00000000000000000000000000000000
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1a77106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug: Finished request 556180.
Tue Feb 11 09:58:32 2014 : Debug: Cleaning up request 556175 ID 90 with timestamp +1110040
Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=96, length=204
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "SLO"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0xd3c3bde7120e262bac416f9a46410b80
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x020400061900
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1a77106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "SLO", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 4 length 6
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Continuing tunnel setup.
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = ok
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP/peap
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] processing type peap
Tue Feb 11 09:58:32 2014 : Debug: [peap] processing EAP-TLS
Tue Feb 11 09:58:32 2014 : Debug: [peap] Received TLS ACK
Tue Feb 11 09:58:32 2014 : Debug: [peap] ACK handshake fragment handler
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_verify returned 1
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_process returned 13
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAPTLS_HANDLED
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: Sending Access-Challenge packet to host 172.23.12.254 port 1645, id=96, length=0
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x0105027a190066696c653a2f2f5c5c6c61696b615c43657274456e726f6c6c5c5361726177616b4e6574253230574c414e25323043412e63726c301006092b06010401823715010403020100300d06092a864886f70d01010505000381810080ac4acc1fe766d6ace342c0b5f48a808a5b22bdf367a4e28c1448449c6f7c1d7df34d940fcf3e99001c2a898144a09ca8083de74c74349a3bc11b2b116fbeb06ddaa41714ca678f9e911ed44741c7add8d3ead55044df48997091d9e6dbf0be79d46d19caaebe71fc6e56db03987ce79b7730fce5dd2d1ec3ad9c9fb8f66d62160301018d0c0001890080e3909dea5de3661e0ae171b5b06a9e7bad44a2
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 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
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x0b706f5274f4e7633ac6f67d20f1567e1823813337c54b4db9702a4891d4d78ebcccdd00a8b92fd8499f861e101032c7d6bcd6a8e01bcf3c6166aa0c42774f54f387a0ca310213f45e9d85bbcb069e957cf09307eeece154844a6d377e136f4d6e94584e24dfd64c0069d01afc83a8830bf0f39746868916030100040e000000
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x00000000000000000000000000000000
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1b76106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug: Finished request 556181.
Tue Feb 11 09:58:32 2014 : Debug: Cleaning up request 556176 ID 91 with timestamp +1110040
Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=97, length=406
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "SLO"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0xbc330e8aafcdb23dee44c2d32a989b94
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x020500d01980000000c616030100861000008200803ae6e31ef19d248d92809763aa1399442f8b0cc886921f26964d0363b56569d5d9a48f534aaf5ed7e385d53fec4585acef36a00b94329ada0d20906871a48c13306e487dfa953f24e23d4d4844fa4c4234f1a7bb2b769cb6ba9a0e7402d452b69d39230f78deab26d2bc99c5c0fc3f06957dc6cd988354cda2d2278d81a8619d140301000101160301003003b9965b804a9a4d7f64ba7731f963c79de7a23075202c87c5f7fa9b9f930469ffdcdc0cba3352fa530f869174e89898
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1b76106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "SLO", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 5 length 208
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Continuing tunnel setup.
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = ok
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP/peap
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] processing type peap
Tue Feb 11 09:58:32 2014 : Debug: [peap] processing EAP-TLS
Tue Feb 11 09:58:32 2014 : Debug: [peap] Length Included
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_verify returned 11
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 read client key exchange A
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 read finished A
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 write change cipher spec A
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 write finished A
Tue Feb 11 09:58:32 2014 : Debug: [peap]     TLS_accept: SSLv3 flush data
Tue Feb 11 09:58:32 2014 : Debug: [peap]     (other): SSL negotiation finished successfully
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_process returned 13
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAPTLS_HANDLED
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: Sending Access-Challenge packet to host 172.23.12.254 port 1645, id=97, length=0
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x0106004119001403010001011603010030da9b636e4885c71ce140abbcfb84b98b0c1bd85662d46ac561f29a3bc3914d00546470b230b7b3917ed4d344909dac43
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x00000000000000000000000000000000
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1c75106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug: Finished request 556182.
Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=98, length=204
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "SLO"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0xbdef0f0c65b4cbec3d7f1f8eee846376
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x020600061900
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1c75106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "SLO", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 6 length 6
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Continuing tunnel setup.
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = ok
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP/peap
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] processing type peap
Tue Feb 11 09:58:32 2014 : Debug: [peap] processing EAP-TLS
Tue Feb 11 09:58:32 2014 : Debug: [peap] Received TLS ACK
Tue Feb 11 09:58:32 2014 : Debug: [peap] ACK handshake is finished
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_verify returned 3
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_process returned 3
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAPTLS_SUCCESS
Tue Feb 11 09:58:32 2014 : Debug: [peap] Session established.  Decoding tunneled attributes.
Tue Feb 11 09:58:32 2014 : Debug: [peap] Peap state TUNNEL ESTABLISHED
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: Sending Access-Challenge packet to host 172.23.12.254 port 1645, id=98, length=0
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x0107002b190017030100206849fb088f09c18885a5b7fe874ebdcebc52e1a84c2ab6f600a98b8f727506ce
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x00000000000000000000000000000000
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1d74106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug: Finished request 556183.
Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=99, length=278
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "SLO"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x50c465239818b0dc5254e3feafb2be7b
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x02070050190017030100203b782e6a3a4196560db04991a8a07c2c5640d7adcf3caed8cf5ddb83d7bff12f1703010020892d990bbe2584d2b8f6ae64e7a5b2d827bd5ccae18970df7bf63c0a42a5d09d
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1d74106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "SLO", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 7 length 80
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Continuing tunnel setup.
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = ok
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP/peap
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] processing type peap
Tue Feb 11 09:58:32 2014 : Debug: [peap] processing EAP-TLS
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_verify returned 7
Tue Feb 11 09:58:32 2014 : Debug: [peap] Done initial handshake
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_process returned 7
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAPTLS_OK
Tue Feb 11 09:58:32 2014 : Debug: [peap] Session established.  Decoding tunneled attributes.
Tue Feb 11 09:58:32 2014 : Debug: [peap] Peap state WAITING FOR INNER IDENTITY
Tue Feb 11 09:58:32 2014 : Debug: [peap] Identity - jacquegp
Tue Feb 11 09:58:32 2014 : Debug: [peap] Got inner identity 'jacquegp'
Tue Feb 11 09:58:32 2014 : Debug: [peap] Setting default EAP type for tunneled EAP session.
Tue Feb 11 09:58:32 2014 : Debug: [peap] Setting User-Name to jacquegp
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[chap] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[mschap] = noop
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "jacquegp", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++update control {
Tue Feb 11 09:58:32 2014 : Debug: ++} # update control = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap] EAP packet type response id 7 length 13
Tue Feb 11 09:58:32 2014 : Debug: [eap] No EAP Start, assuming it's an on-going EAP conversation
Tue Feb 11 09:58:32 2014 : Debug: +++[eap] = updated
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = updated
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Cisco-AVPair == "ssid=Canteen")
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Cisco-AVPair == "ssid=Canteen") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Cisco-AVPair == "ssid=Canteen") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if ("%{Huntgroup-Name}" == "branch")
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{Huntgroup-Name} ->
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating ("%{Huntgroup-Name}" == "branch") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if ("%{Huntgroup-Name}" == "branch") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++load-balance redundant-load-balance {
Tue Feb 11 09:58:32 2014 : Debug: ++redundant-load-balance group redundant-load-balance {
Tue Feb 11 09:58:32 2014 : Debug: [ldap1] performing user authorization for jacquegp
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       expand: %{Stripped-User-Name} ->
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       ... expanding second conditional
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       expand: %{User-Name} -> jacquegp
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=jacquegp)
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       expand: o=company -> o=company
Tue Feb 11 09:58:32 2014 : Debug: [ldap1] Added User-Password = {SHA}6X+OTZXIDpJcEb5au+Ov9+kSFfg= in check items
Tue Feb 11 09:58:32 2014 : Debug: [ldap1] looking for check items in directory...
Tue Feb 11 09:58:32 2014 : Debug: [ldap1] looking for reply items in directory...
Tue Feb 11 09:58:32 2014 : Debug: +++[ldap1] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # redundant-load-balance group redundant-load-balance = ok
Tue Feb 11 09:58:32 2014 : Debug: [pap] Normalizing NT-Password from hex encoding
Tue Feb 11 09:58:32 2014 : Debug: [pap] Normalizing SHA1-Password from base64 encoding
Tue Feb 11 09:58:32 2014 : Debug: [pap] WARNING: Auth-Type already set.  Not setting to PAP
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (("%{outer.request:EAP-Type}" == EAP-TTLS) && ("%{control:Auth-Type}" != MSCHAP))
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{outer.request:EAP-Type} -> PEAP
Tue Feb 11 09:58:32 2014 : Debug: ?? Evaluating ("%{outer.request:EAP-Type}" == EAP-TTLS) -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ?? Skipping ("%{control:Auth-Type}" != MSCHAP)
Tue Feb 11 09:58:32 2014 : Debug: ++? if (("%{outer.request:EAP-Type}" == EAP-TTLS) && ("%{control:Auth-Type}" != MSCHAP)) -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++[files] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: [pap] WARNING: Auth-Type already set.  Not setting to PAP
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = updated
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = EAP
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap] EAP Identity
Tue Feb 11 09:58:32 2014 : Debug: [eap] processing type mschapv2
Tue Feb 11 09:58:32 2014 : Debug: ++[eap] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: [peap] Got tunneled Access-Challenge
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: Sending Access-Challenge packet to host 172.23.12.254 port 1645, id=99, length=0
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x0108004b19001703010040ec6a60d879144dde5d4ca2ac146ac02be92b225cf3efaee3d944f006c943d07cd72a53ab97a27ead44d57cb1d84f2b74277a5fbfda6935b69e143da2cdc8ed70
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x00000000000000000000000000000000
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1e7b106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug: Finished request 556184.
Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=100, length=342
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "SLO"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x582daadeeb09b7a9a42db4ae11d6994f
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x02080090190017030100200a688e6e146b780f375d57afc0ae93b414455c0f67cfb68062f0daa6c2c05d371703010060ca22e8a9caaee1fcca21de558b3f4f732baa3db8700b76aa28f8b30e3df9470ecb24ea6724efc592b065a87cc8f10b3a9b179b302097a820535a39dd497d84722330c999b59e3dd1ee6c2d94912369ed7185efee62e1fbb7e2536a0caefb13c4
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1e7b106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "SLO", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 8 length 144
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Continuing tunnel setup.
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = ok
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP/peap
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] processing type peap
Tue Feb 11 09:58:32 2014 : Debug: [peap] processing EAP-TLS
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_verify returned 7
Tue Feb 11 09:58:32 2014 : Debug: [peap] Done initial handshake
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_process returned 7
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAPTLS_OK
Tue Feb 11 09:58:32 2014 : Debug: [peap] Session established.  Decoding tunneled attributes.
Tue Feb 11 09:58:32 2014 : Debug: [peap] Peap state phase2
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAP type mschapv2
Tue Feb 11 09:58:32 2014 : Debug: [peap] Setting User-Name to jacquegp
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[chap] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[mschap] = noop
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "jacquegp", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++update control {
Tue Feb 11 09:58:32 2014 : Debug: ++} # update control = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap] EAP packet type response id 8 length 67
Tue Feb 11 09:58:32 2014 : Debug: [eap] No EAP Start, assuming it's an on-going EAP conversation
Tue Feb 11 09:58:32 2014 : Debug: +++[eap] = updated
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = updated
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Cisco-AVPair == "ssid=Canteen")
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Cisco-AVPair == "ssid=Canteen") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Cisco-AVPair == "ssid=Canteen") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if ("%{Huntgroup-Name}" == "branch")
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{Huntgroup-Name} ->
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating ("%{Huntgroup-Name}" == "branch") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if ("%{Huntgroup-Name}" == "branch") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++load-balance redundant-load-balance {
Tue Feb 11 09:58:32 2014 : Debug: ++redundant-load-balance group redundant-load-balance {
Tue Feb 11 09:58:32 2014 : Debug: [ldap1] performing user authorization for jacquegp
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       expand: %{Stripped-User-Name} ->
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       ... expanding second conditional
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       expand: %{User-Name} -> jacquegp
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=jacquegp)
Tue Feb 11 09:58:32 2014 : Debug: [ldap1]       expand: o=company -> o=company
Tue Feb 11 09:58:32 2014 : Debug: [ldap1] Added User-Password = {SHA}6X+OTZXIDpJcEb5au+Ov9+kSFfg= in check items
Tue Feb 11 09:58:32 2014 : Debug: [ldap1] looking for check items in directory...
Tue Feb 11 09:58:32 2014 : Debug: [ldap1] looking for reply items in directory...
Tue Feb 11 09:58:32 2014 : Debug: +++[ldap1] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # redundant-load-balance group redundant-load-balance = ok
Tue Feb 11 09:58:32 2014 : Debug: [pap] Normalizing NT-Password from hex encoding
Tue Feb 11 09:58:32 2014 : Debug: [pap] Normalizing SHA1-Password from base64 encoding
Tue Feb 11 09:58:32 2014 : Debug: [pap] WARNING: Auth-Type already set.  Not setting to PAP
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (("%{outer.request:EAP-Type}" == EAP-TTLS) && ("%{control:Auth-Type}" != MSCHAP))
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{outer.request:EAP-Type} -> PEAP
Tue Feb 11 09:58:32 2014 : Debug: ?? Evaluating ("%{outer.request:EAP-Type}" == EAP-TTLS) -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ?? Skipping ("%{control:Auth-Type}" != MSCHAP)
Tue Feb 11 09:58:32 2014 : Debug: ++? if (("%{outer.request:EAP-Type}" == EAP-TTLS) && ("%{control:Auth-Type}" != MSCHAP)) -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++[files] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: [pap] WARNING: Auth-Type already set.  Not setting to PAP
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = updated
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = EAP
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap] EAP/mschapv2
Tue Feb 11 09:58:32 2014 : Debug: [eap] processing type mschapv2
Tue Feb 11 09:58:32 2014 : Debug: [mschapv2] # Executing group from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
Tue Feb 11 09:58:32 2014 : Debug: [mschapv2] +group MS-CHAP {
Tue Feb 11 09:58:32 2014 : Debug: [mschap] No Cleartext-Password configured.  Cannot create LM-Password.
Tue Feb 11 09:58:32 2014 : Debug: [mschap] Found NT-Password
Tue Feb 11 09:58:32 2014 : Debug: [mschap] Creating challenge hash with username: jacquegp
Tue Feb 11 09:58:32 2014 : Debug: [mschap] Client is using MS-CHAPv2 for jacquegp, we need NT-Password
Tue Feb 11 09:58:32 2014 : Debug: [mschap] adding MS-CHAPv2 MPPE keys
Tue Feb 11 09:58:32 2014 : Debug: ++[mschap] = ok
Tue Feb 11 09:58:32 2014 : Debug: +} # group MS-CHAP = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[eap] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: [peap] Got tunneled Access-Challenge
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: Sending Access-Challenge packet to host 172.23.12.254 port 1645, id=100, length=0
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x0109005b19001703010050ad04d16488e102d8741a6e02d0d3350eb2177f43eedf21e5c5c8fc99696de11faddca788a24e92a3a182b02565f7ee41982fe4c16558db2a71dddbdc97a4e4c1672aaa709ae074275fb3e73713397d8b
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x00000000000000000000000000000000
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1f7a106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug: Finished request 556185.
Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=101, length=278
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "SLO"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x66d2e514c1d1ec5416f51fa206b39146
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x020900501900170301002022e398b942ed12ce226a5da78f1e46e84efb88720718340713abbf9961db85591703010020c751b4f7035184274eb20963ca8d8fd97f633776f81931b46177c77a5dd9cea2
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1f7a106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "SLO", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 9 length 80
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Continuing tunnel setup.
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = ok
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP/peap
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] processing type peap
Tue Feb 11 09:58:32 2014 : Debug: [peap] processing EAP-TLS
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_verify returned 7
Tue Feb 11 09:58:32 2014 : Debug: [peap] Done initial handshake
Tue Feb 11 09:58:32 2014 : Debug: [peap] eaptls_process returned 7
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAPTLS_OK
Tue Feb 11 09:58:32 2014 : Debug: [peap] Session established.  Decoding tunneled attributes.
Tue Feb 11 09:58:32 2014 : Debug: [peap] Peap state phase2
Tue Feb 11 09:58:32 2014 : Debug: [peap] EAP type mschapv2
Tue Feb 11 09:58:32 2014 : Debug: [peap] Setting User-Name to jacquegp
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[chap] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[mschap] = noop
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "jacquegp", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++update control {
Tue Feb 11 09:58:32 2014 : Debug: ++} # update control = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap] EAP packet type response id 9 length 6
Tue Feb 11 09:58:32 2014 : Debug: [eap] No EAP Start, assuming it's an on-going EAP conversation
Tue Feb 11 09:58:32 2014 : Debug: +++[eap] = updated
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = updated
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Cisco-AVPair == "ssid=Canteen")
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Cisco-AVPair == "ssid=Canteen") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Cisco-AVPair == "ssid=Canteen") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if ("%{Huntgroup-Name}" == "branch")
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{Huntgroup-Name} ->
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating ("%{Huntgroup-Name}" == "branch") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if ("%{Huntgroup-Name}" == "branch") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++load-balance redundant-load-balance {
Tue Feb 11 09:58:32 2014 : Debug: ++redundant-load-balance group redundant-load-balance {
Tue Feb 11 09:58:32 2014 : Debug: [ldap2] performing user authorization for jacquegp
Tue Feb 11 09:58:32 2014 : Debug: [ldap2]       expand: %{Stripped-User-Name} ->
Tue Feb 11 09:58:32 2014 : Debug: [ldap2]       ... expanding second conditional
Tue Feb 11 09:58:32 2014 : Debug: [ldap2]       expand: %{User-Name} -> jacquegp
Tue Feb 11 09:58:32 2014 : Debug: [ldap2]       expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=jacquegp)
Tue Feb 11 09:58:32 2014 : Debug: [ldap2]       expand: o=company -> o=company
Tue Feb 11 09:58:32 2014 : Debug: [ldap2] Added User-Password = {SHA}6X+OTZXIDpJcEb5au+Ov9+kSFfg= in check items
Tue Feb 11 09:58:32 2014 : Debug: [ldap2] looking for check items in directory...
Tue Feb 11 09:58:32 2014 : Debug: [ldap2] looking for reply items in directory...
Tue Feb 11 09:58:32 2014 : Debug: +++[ldap2] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # redundant-load-balance group redundant-load-balance = ok
Tue Feb 11 09:58:32 2014 : Debug: [pap] Normalizing NT-Password from hex encoding
Tue Feb 11 09:58:32 2014 : Debug: [pap] Normalizing SHA1-Password from base64 encoding
Tue Feb 11 09:58:32 2014 : Debug: [pap] WARNING: Auth-Type already set.  Not setting to PAP
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (("%{outer.request:EAP-Type}" == EAP-TTLS) && ("%{control:Auth-Type}" != MSCHAP))
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{outer.request:EAP-Type} -> PEAP
Tue Feb 11 09:58:32 2014 : Debug: ?? Evaluating ("%{outer.request:EAP-Type}" == EAP-TTLS) -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ?? Skipping ("%{control:Auth-Type}" != MSCHAP)
Tue Feb 11 09:58:32 2014 : Debug: ++? if (("%{outer.request:EAP-Type}" == EAP-TTLS) && ("%{control:Auth-Type}" != MSCHAP)) -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++[files] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: [pap] WARNING: Auth-Type already set.  Not setting to PAP
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = updated
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = EAP
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap] EAP/mschapv2
Tue Feb 11 09:58:32 2014 : Debug: [eap] processing type mschapv2
Tue Feb 11 09:58:32 2014 : Debug: [eap] Freeing handler
Tue Feb 11 09:58:32 2014 : Debug: ++[eap] = ok
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = ok
Tue Feb 11 09:58:32 2014 : Debug: # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/inner-tunnel
Tue Feb 11 09:58:32 2014 : Debug: +group post-auth {
Tue Feb 11 09:58:32 2014 : Debug: ++? if (("%{outer.request:EAP-Type}" == PEAP) || ("%{control:Auth-Type}" == MSCHAP))
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{outer.request:EAP-Type} -> PEAP
Tue Feb 11 09:58:32 2014 : Debug: ?? Evaluating ("%{outer.request:EAP-Type}" == PEAP) -> TRUE
Tue Feb 11 09:58:32 2014 : Debug: ?? Skipping ("%{control:Auth-Type}" == MSCHAP)
Tue Feb 11 09:58:32 2014 : Debug: ++? if (("%{outer.request:EAP-Type}" == PEAP) || ("%{control:Auth-Type}" == MSCHAP)) -> TRUE
Tue Feb 11 09:58:32 2014 : Debug: ++if (("%{outer.request:EAP-Type}" == PEAP) || ("%{control:Auth-Type}" == MSCHAP)) {
Tue Feb 11 09:58:32 2014 : Debug: +++? if ("%{sql:SELECT COUNT(username) FROM `radcheck` WHERE username='%{User-Name}' and attribute='NT-Password' and value='%{control:NT-Password}'}" == 0)
Tue Feb 11 09:58:32 2014 : Debug: sql_xlat
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{User-Name} -> jacquegp
Tue Feb 11 09:58:32 2014 : Debug: sql_set_user escaped user --> 'jacquegp'
Tue Feb 11 09:58:32 2014 : Debug:       expand: SELECT COUNT(username) FROM `radcheck` WHERE username='%{User-Name}' and attribute='NT-Password' and value='%{control:NT-Password}' -> SELECT COUNT(username) FROM `radcheck` WHERE username='jacquegp' and attribute='NT-Password' and value='0x2518244badc68ed509aaf41cee9461d2'
Tue Feb 11 09:58:32 2014 : Debug: sql_xlat finished
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{sql:SELECT COUNT(username) FROM `radcheck` WHERE username='%{User-Name}' and attribute='NT-Password' and value='%{control:NT-Password}'} -> 1
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating ("%{sql:SELECT COUNT(username) FROM `radcheck` WHERE username='%{User-Name}' and attribute='NT-Password' and value='%{control:NT-Password}'}" == 0) -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: +++? if ("%{sql:SELECT COUNT(username) FROM `radcheck` WHERE username='%{User-Name}' and attribute='NT-Password' and value='%{control:NT-Password}'}" == 0) -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++} # if (("%{outer.request:EAP-Type}" == PEAP) || ("%{control:Auth-Type}" == MSCHAP)) = noop
Tue Feb 11 09:58:32 2014 : Debug: ++ ... skipping else for request 556186: Preceding "if" was taken
Tue Feb 11 09:58:32 2014 : Debug: ++update outer.reply {
Tue Feb 11 09:58:32 2014 : Debug:       expand: %{request:User-Name} -> jacquegp
Tue Feb 11 09:58:32 2014 : Debug: ++} # update outer.reply = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group post-auth = noop
Tue Feb 11 09:58:32 2014 : Debug: [peap] Tunneled authentication was successful.
Tue Feb 11 09:58:32 2014 : Debug: [peap] SUCCESS
Tue Feb 11 09:58:32 2014 : Debug: [peap] Saving tunneled attributes for later
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = handled
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = handled
Tue Feb 11 09:58:32 2014 : Debug: Sending Access-Challenge packet to host 172.23.12.254 port 1645, id=101, length=0
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "jacquegp"
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x010a002b190017030100201278d8b49e1c026b2f34d961bf660de263813d0f9033639f146fe5baf2675fcf
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0x00000000000000000000000000000000
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1079106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug: Finished request 556186.
Tue Feb 11 09:58:32 2014 : Debug: Received Access-Request packet from host 172.23.12.254 port 1645, id=102, length=283
Tue Feb 11 09:58:32 2014 : Debug:       User-Name = "jacquegp"
Tue Feb 11 09:58:32 2014 : Debug:       Framed-MTU = 1400
Tue Feb 11 09:58:32 2014 : Debug:       Called-Station-Id = "003a.9aba.7bf0"
Tue Feb 11 09:58:32 2014 : Debug:       Calling-Station-Id = "8832.9b40.493a"
Tue Feb 11 09:58:32 2014 : Debug:       Cisco-AVPair = "ssid=Wireless"
Tue Feb 11 09:58:32 2014 : Debug:       WISPr-Location-Name = "Location"
Tue Feb 11 09:58:32 2014 : Debug:       Service-Type = Login-User
Tue Feb 11 09:58:32 2014 : Debug:       Message-Authenticator = 0xd3c7bd34fe6ab7510f2d1c529f4e9513
Tue Feb 11 09:58:32 2014 : Debug:       EAP-Message = 0x020a005019001703010020090e5ecf84ca7daf04c43eff2c62dffd490c3165926acddb05e42bca4a2feae7170301002084ce26a1c964a6ab6f8a698a7731102564f9c8867a7a05ddd592d015c17d6649
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Type = Wireless-802.11
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port = 4351
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Port-Id = "4351"
Tue Feb 11 09:58:32 2014 : Debug:       State = 0x1873098d1079106583e3066b1fd4db72
Tue Feb 11 09:58:32 2014 : Debug:       NAS-IP-Address = 172.23.12.254
Tue Feb 11 09:58:32 2014 : Debug:       NAS-Identifier = "Site"
Tue Feb 11 09:58:32 2014 : Debug: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authorize {
Tue Feb 11 09:58:32 2014 : Debug: ++[preprocess] = ok
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No '@' in User-Name = "jacquegp", looking up realm NULL
Tue Feb 11 09:58:32 2014 : Debug: [suffix] No such realm "NULL"
Tue Feb 11 09:58:32 2014 : Debug: ++[suffix] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor")
Tue Feb 11 09:58:32 2014 : Debug:     (Attribute Aruba-Essid-Name was not found)
Tue Feb 11 09:58:32 2014 : Debug: ? Evaluating (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++? if (Aruba-Essid-Name == "Visitor") -> FALSE
Tue Feb 11 09:58:32 2014 : Debug: ++else else {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] EAP packet type response id 10 length 80
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Continuing tunnel setup.
Tue Feb 11 09:58:32 2014 : Debug: +++[eap_custom] = ok
Tue Feb 11 09:58:32 2014 : Debug: ++} # else else = ok
Tue Feb 11 09:58:32 2014 : Debug: ++[expiration] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[logintime] = noop
Tue Feb 11 09:58:32 2014 : Debug: ++[pap] = noop
Tue Feb 11 09:58:32 2014 : Debug: +} # group authorize = ok
Tue Feb 11 09:58:32 2014 : Debug: Found Auth-Type = eap_custom
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group authenticate {
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Request found, released from the list
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Identity does not match User-Name.  Authentication failed.
Tue Feb 11 09:58:32 2014 : Debug: [eap_custom] Failed in handler
Tue Feb 11 09:58:32 2014 : Debug: ++[eap_custom] = invalid
Tue Feb 11 09:58:32 2014 : Debug: +} # group authenticate = invalid
Tue Feb 11 09:58:32 2014 : Debug: Failed to authenticate the user.
Tue Feb 11 09:58:32 2014 : Debug: Using Post-Auth-Type REJECT
Tue Feb 11 09:58:32 2014 : Debug: # Executing group from file /usr/local/etc/raddb/sites-enabled/default
Tue Feb 11 09:58:32 2014 : Debug: +group REJECT {
Tue Feb 11 09:58:32 2014 : Debug: [attr_filter.access_reject]   expand: %{User-Name} -> jacquegp
Tue Feb 11 09:58:32 2014 : Debug: ++[attr_filter.access_reject] = updated
Tue Feb 11 09:58:32 2014 : Debug: +} # group REJECT = updated
Tue Feb 11 09:58:32 2014 : Debug: Delaying reject of request 556187 for 1 seconds
Tue Feb 11 09:58:33 2014 : Debug: Cleaning up request 556177 ID 92 with timestamp +1110040
Tue Feb 11 09:58:33 2014 : Debug: Sending delayed reject for request 556187
Tue Feb 11 09:58:33 2014 : Debug: Sending Access-Reject packet to host 172.23.12.254 port 1645, id=102, length=0
