Hello! I'm having a strange problem with acct_unique module and simultaneous connections. In my first attempt is ok. The FreeRadius generates acctuniqueid smoothly: (1) Received Accounting-Request Id 251 from 192.168.0.1:45287 to 192.168.0.98:1813 length 147(1) Service-Type = Framed-User(1) Framed-Protocol = PPP(1) NAS-Port = 15729401(1) NAS-Port-Type = Ethernet(1) User-Name = "test"(1) Calling-Station-Id = "C0:4A:00:87:C6:D9"(1) Called-Station-Id = "service1"(1) NAS-Port-Id = "bridge1"(1) Acct-Session-Id = "819000bd"(1) Framed-IP-Address = 0.0.0.0(1) Acct-Authentic = RADIUS(1) Event-Timestamp = "Feb 7 2016 19:54:52 BRST"(1) Acct-Status-Type = Start(1) NAS-Identifier = "Main_Router"(1) Acct-Delay-Time = 0(1) NAS-IP-Address = 192.168.0.1(1) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default(1) preacct {(1) [preprocess] = ok(1) policy acct_unique {(1) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) {(1) EXPAND %{string:Class}(1) -->(1) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) -> FALSE(1) else {(1) update request {(1) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}(1) --> 1a64f851542b58ee9e9bddec7c24d202(1) &Acct-Unique-Session-Id := 1a64f851542b58ee9e9bddec7c24d202(1) } # update request = noop(1) EXPAND %{User-Name}(1) --> test(1) EXPAND %{Acct-Session-ID}(1) --> 819000bd(1) EXPAND %{NAS-IPv6-Address}(1) -->(1) EXPAND %{NAS-IP-Address}(1) --> 192.168.0.1(1) EXPAND %{NAS-Identifier}(1) --> Main_Router(1) EXPAND %{NAS-Port-ID}(1) --> bridge1(1) EXPAND %{NAS-Port}(1) --> 15729401(1) } Then simulated an error: Quit FreeRadius, then I disconnected the client. Then I turned on the server and the client connected again. But there was an error in radacct : it created a new entry with the same Acct-Session-ID in the database instead of putting the acctstoptime the first connection. I realized that acctuniqueid was created differently: (0) Received Access-Request Id 253 from 192.168.0.1:36215 to 192.168.0.98:1812 length 144(0) Service-Type = Framed-User(0) Framed-Protocol = PPP(0) NAS-Port = 15729402(0) NAS-Port-Type = Ethernet(0) User-Name = "test"(0) Calling-Station-Id = "C0:4A:00:87:C6:D9"(0) Called-Station-Id = "service1"(0) NAS-Port-Id = "bridge1"(0) CHAP-Challenge = 0x14fabff364f33d09f97a7992e7658be9(0) CHAP-Password = 0x011ad42c708f1b1279142669b5d1d20f23(0) NAS-Identifier = "Main_Router"(0) NAS-IP-Address = 192.168.0.1(0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default(0) authorize {(0) policy filter_username {(0) if (&User-Name) {(0) if (&User-Name) -> TRUE(0) if (&User-Name) {(0) if (&User-Name =~ / /) {(0) if (&User-Name =~ / /) -> FALSE(0) if (&User-Name =~ /@[^@]*@/ ) {(0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE(0) if (&User-Name =~ /\.\./ ) {(0) if (&User-Name =~ /\.\./ ) -> FALSE(0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {(0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE(0) if (&User-Name =~ /\.$/) {(0) if (&User-Name =~ /\.$/) -> FALSE(0) if (&User-Name =~ /@\./) {(0) if (&User-Name =~ /@\./) -> FALSE(0) } # if (&User-Name) = notfound(0) } # policy filter_username = notfound(0) [preprocess] = ok(0) chap: &control:Auth-Type := CHAP(0) [chap] = ok(0) [mschap] = noop(0) [digest] = noop(0) suffix: Checking for suffix after "@"(0) suffix: No '@' in User-Name = "test", looking up realm NULL(0) suffix: No such realm "NULL"(0) [suffix] = noop(0) eap: No EAP-Message, not doing EAP(0) [eap] = noop(0) files: users: Matched entry DEFAULT at line 181(0) [files] = ok(0) sql: EXPAND %{User-Name}(0) sql: --> test(0) sql: SQL-User-Name set to 'test'rlm_sql (sql): Reserved connection (1)(0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id(0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id(0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id(0) sql: User found in radcheck table(0) sql: Conditional check items matched, merging assignment check items(0) sql: Cleartext-Password := "123456"(0) sql: EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id(0) sql: --> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id(0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id(0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority(0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority(0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority(0) sql: User found in the group table(0) sql: EXPAND SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id(0) sql: --> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '1' ORDER BY id(0) sql: Executing select query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '1' ORDER BY id(0) sql: Group "1": Conditional check items matched(0) sql: Group "1": Merging assignment check items(0) sql: Simultaneous-Use := 1(0) sql: EXPAND SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id(0) sql: --> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '1' ORDER BY id(0) sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '1' ORDER BY id(0) sql: Group "1": Merging reply itemsrlm_sql (sql): Released connection (1)rlm_sql (sql): Need 4 more connections to reach 10 sparesrlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots usedrlm_sql_mysql: Starting connect to MySQL serverrlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.6.25, protocol version 10(0) [sql] = ok(0) [expiration] = noop(0) [logintime] = noop(0) pap: WARNING: Auth-Type already set. Not setting to PAP(0) [pap] = noop(0) } # authorize = ok(0) Found Auth-Type = CHAP(0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default(0) Auth-Type CHAP {(0) chap: Comparing with "known good" Cleartext-Password(0) chap: CHAP user "test" authenticated successfully(0) [chap] = ok(0) } # Auth-Type CHAP = ok(0) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default(0) session {(0) sql: EXPAND %{User-Name}(0) sql: --> test(0) sql: SQL-User-Name set to 'test'(0) sql: EXPAND SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL(0) sql: --> SELECT COUNT(*) FROM radacct WHERE username = 'test' AND acctstoptime IS NULLrlm_sql (sql): Reserved connection (2)(0) sql: Executing select query: SELECT COUNT(*) FROM radacct WHERE username = 'test' AND acctstoptime IS NULL(0) sql: EXPAND SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL(0) sql: --> SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = 'test' AND acctstoptime IS NULL(0) sql: Executing select query: SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = 'test' AND acctstoptime IS NULL-r: not found(0) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default(0) preacct {(0) [preprocess] = ok(0) policy acct_unique {(0) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) {(0) EXPAND %{string:Class}(0) -->(0) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) -> FALSE(0) else {(0) update request {(0) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}(0) --> 28b1b845bc61bf9ac3794bceaff7f323(0) &Acct-Unique-Session-Id := 28b1b845bc61bf9ac3794bceaff7f323(0) } # update request = noop(0) EXPAND %{User-Name}(0) --> test(0) EXPAND %{Acct-Session-ID}(0) --> 819000bd(0) EXPAND %{NAS-IPv6-Address}(0) -->(0) EXPAND %{NAS-IP-Address}(0) --> 192.168.0.1(0) EXPAND %{NAS-Identifier}(0) -->(0) EXPAND %{NAS-Port-ID}(0) -->(0) EXPAND %{NAS-Port}(0) --> 0(0) } Note that the NAS-Identifier, NAS-Port-ID and NAS-Port parameters are empty despite the package coming with the information! This is generating a new entry into radacct because md5 changes... Could someone please help me? ************the first attempt************** (0) Received Access-Request Id 250 from 192.168.0.1:59232 to 192.168.0.98:1812 length 144(0) Service-Type = Framed-User(0) Framed-Protocol = PPP(0) NAS-Port = 15729401(0) NAS-Port-Type = Ethernet(0) User-Name = "test"(0) Calling-Station-Id = "C0:4A:00:87:C6:D9"(0) Called-Station-Id = "service1"(0) NAS-Port-Id = "bridge1"(0) CHAP-Challenge = 0xa5063c70996debf802df861c46e79cf4(0) CHAP-Password = 0x019fb70c0c541fc544356832e78f10d47b(0) NAS-Identifier = "Main_Router"(0) NAS-IP-Address = 192.168.0.1(0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default(0) authorize {(0) policy filter_username {(0) if (&User-Name) {(0) if (&User-Name) -> TRUE(0) if (&User-Name) {(0) if (&User-Name =~ / /) {(0) if (&User-Name =~ / /) -> FALSE(0) if (&User-Name =~ /@[^@]*@/ ) {(0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE(0) if (&User-Name =~ /\.\./ ) {(0) if (&User-Name =~ /\.\./ ) -> FALSE(0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {(0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE(0) if (&User-Name =~ /\.$/) {(0) if (&User-Name =~ /\.$/) -> FALSE(0) if (&User-Name =~ /@\./) {(0) if (&User-Name =~ /@\./) -> FALSE(0) } # if (&User-Name) = notfound(0) } # policy filter_username = notfound(0) [preprocess] = ok(0) chap: &control:Auth-Type := CHAP(0) [chap] = ok(0) [mschap] = noop(0) [digest] = noop(0) suffix: Checking for suffix after "@"(0) suffix: No '@' in User-Name = "test", looking up realm NULL(0) suffix: No such realm "NULL"(0) [suffix] = noop(0) eap: No EAP-Message, not doing EAP(0) [eap] = noop(0) files: users: Matched entry DEFAULT at line 181(0) [files] = ok(0) sql: EXPAND %{User-Name}(0) sql: --> test(0) sql: SQL-User-Name set to 'test'rlm_sql (sql): Reserved connection (1)(0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id(0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id(0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id(0) sql: User found in radcheck table(0) sql: Conditional check items matched, merging assignment check items(0) sql: Cleartext-Password := "123456"(0) sql: EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id(0) sql: --> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id(0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id(0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority(0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority(0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority(0) sql: User found in the group table(0) sql: EXPAND SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id(0) sql: --> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '1' ORDER BY id(0) sql: Executing select query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '1' ORDER BY id(0) sql: Group "1": Conditional check items matched(0) sql: Group "1": Merging assignment check items(0) sql: Simultaneous-Use := 1(0) sql: EXPAND SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id(0) sql: --> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '1' ORDER BY id(0) sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '1' ORDER BY id(0) sql: Group "1": Merging reply itemsrlm_sql (sql): Released connection (1)rlm_sql (sql): Need 4 more connections to reach 10 sparesrlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots usedrlm_sql_mysql: Starting connect to MySQL serverrlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.6.25, protocol version 10(0) [sql] = ok(0) [expiration] = noop(0) [logintime] = noop(0) pap: WARNING: Auth-Type already set. Not setting to PAP(0) [pap] = noop(0) } # authorize = ok(0) Found Auth-Type = CHAP(0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default(0) Auth-Type CHAP {(0) chap: Comparing with "known good" Cleartext-Password(0) chap: CHAP user "test" authenticated successfully(0) [chap] = ok(0) } # Auth-Type CHAP = ok(0) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default(0) session {(0) sql: EXPAND %{User-Name}(0) sql: --> test(0) sql: SQL-User-Name set to 'test'(0) sql: EXPAND SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL(0) sql: --> SELECT COUNT(*) FROM radacct WHERE username = 'test' AND acctstoptime IS NULLrlm_sql (sql): Reserved connection (2)(0) sql: Executing select query: SELECT COUNT(*) FROM radacct WHERE username = 'test' AND acctstoptime IS NULLrlm_sql (sql): Released connection (2)(0) [sql] = ok(0) } # session = ok(0) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default(0) post-auth {(0) update {(0) No attributes updated(0) } # update = noop(0) sql: EXPAND .query(0) sql: --> .query(0) sql: Using query template 'query'rlm_sql (sql): Reserved connection (3)(0) sql: EXPAND %{User-Name}(0) sql: --> test(0) sql: SQL-User-Name set to 'test'(0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')(0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', '0x019fb70c0c541fc544356832e78f10d47b', 'Access-Accept', '2016-02-08 06:16:27')(0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', '0x019fb70c0c541fc544356832e78f10d47b', 'Access-Accept', '2016-02-08 06:16:27')(0) sql: SQL query returned: success(0) sql: 1 record(s) updatedrlm_sql (sql): Released connection (3)(0) [sql] = ok(0) [exec] = noop(0) policy remove_reply_message_if_eap {(0) if (&reply:EAP-Message && &reply:Reply-Message) {(0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE(0) else {(0) [noop] = noop(0) } # else = noop(0) } # policy remove_reply_message_if_eap = noop(0) } # post-auth = ok(0) Sent Access-Accept Id 250 from 192.168.0.98:1812 to 192.168.0.1:59232 length 0(0) Framed-Protocol = PPP(0) Framed-Compression = Van-Jacobson-TCP-IP(0) Finished requestWaking up in 4.9 seconds.(1) Received Accounting-Request Id 251 from 192.168.0.1:45287 to 192.168.0.98:1813 length 147(1) Service-Type = Framed-User(1) Framed-Protocol = PPP(1) NAS-Port = 15729401(1) NAS-Port-Type = Ethernet(1) User-Name = "test"(1) Calling-Station-Id = "C0:4A:00:87:C6:D9"(1) Called-Station-Id = "service1"(1) NAS-Port-Id = "bridge1"(1) Acct-Session-Id = "819000bd"(1) Framed-IP-Address = 0.0.0.0(1) Acct-Authentic = RADIUS(1) Event-Timestamp = "Feb 7 2016 19:54:52 BRST"(1) Acct-Status-Type = Start(1) NAS-Identifier = "Main_Router"(1) Acct-Delay-Time = 0(1) NAS-IP-Address = 192.168.0.1(1) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default(1) preacct {(1) [preprocess] = ok(1) policy acct_unique {(1) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) {(1) EXPAND %{string:Class}(1) -->(1) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) -> FALSE(1) else {(1) update request {(1) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}(1) --> 1a64f851542b58ee9e9bddec7c24d202(1) &Acct-Unique-Session-Id := 1a64f851542b58ee9e9bddec7c24d202(1) } # update request = noop(1) EXPAND %{User-Name}(1) --> test(1) EXPAND %{Acct-Session-ID}(1) --> 819000bd(1) EXPAND %{NAS-IPv6-Address}(1) -->(1) EXPAND %{NAS-IP-Address}(1) --> 192.168.0.1(1) EXPAND %{NAS-Identifier}(1) --> Main_Router(1) EXPAND %{NAS-Port-ID}(1) --> bridge1(1) EXPAND %{NAS-Port}(1) --> 15729401(1) } # else = noop(1) } # policy acct_unique = noop(1) suffix: Checking for suffix after "@"(1) suffix: No '@' in User-Name = "test", looking up realm NULL(1) suffix: No such realm "NULL"(1) [suffix] = noop(1) [files] = noop(1) } # preacct = ok(1) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default(1) accounting {(1) detail: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d(1) detail: --> /usr/local/var/log/radius/radacct/192.168.0.1/detail-20160208(1) detail: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.0.1/detail-20160208(1) detail: EXPAND %t(1) detail: --> Mon Feb 8 06:16:27 2016(1) [detail] = ok(1) [unix] = ok(1) sql: EXPAND %{tolower:type.%{Acct-Status-Type}.query}(1) sql: --> type.start.query(1) sql: Using query template 'query'rlm_sql (sql): Reserved connection (4)(1) sql: EXPAND %{User-Name}(1) sql: --> test(1) sql: SQL-User-Name set to 'test'(1) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')(1) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('819000bd', '1a64f851542b58ee9e9bddec7c24d202', 'test', '', '192.168.0.1', 'bridge1', 'Ethernet', FROM_UNIXTIME(1454882092), FROM_UNIXTIME(1454882092), NULL, '0', 'RADIUS', '', '', '0', '0', 'service1', 'C0:4A:00:87:C6:D9', '', 'Framed-User', 'PPP', '0.0.0.0')(1) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('819000bd', '1a64f851542b58ee9e9bddec7c24d202', 'test', '', '192.168.0.1', 'bridge1', 'Ethernet', FROM_UNIXTIME(1454882092), FROM_UNIXTIME(1454882092), NULL, '0', 'RADIUS', '', '', '0', '0', 'service1', 'C0:4A:00:87:C6:D9', '', 'Framed-User', 'PPP', '0.0.0.0')(1) sql: SQL query returned: success(1) sql: 1 record(s) updatedrlm_sql (sql): Released connection (4)(1) [sql] = ok(1) [exec] = noop(1) attr_filter.accounting_response: EXPAND %{User-Name}(1) attr_filter.accounting_response: --> test(1) attr_filter.accounting_response: Matched entry DEFAULT at line 12(1) [attr_filter.accounting_response] = updated(1) } # accounting = updated(1) Sent Accounting-Response Id 251 from 192.168.0.98:1813 to 192.168.0.1:45287 length 0(1) Finished request(1) Cleaning up request packet ID 251 with timestamp +5Waking up in 4.9 seconds.(0) Cleaning up request packet ID 250 with timestamp +5Ready to process requests ************the second attempt************** (0) Received Access-Request Id 253 from 192.168.0.1:36215 to 192.168.0.98:1812 length 144(0) Service-Type = Framed-User(0) Framed-Protocol = PPP(0) NAS-Port = 15729402(0) NAS-Port-Type = Ethernet(0) User-Name = "test"(0) Calling-Station-Id = "C0:4A:00:87:C6:D9"(0) Called-Station-Id = "service1"(0) NAS-Port-Id = "bridge1"(0) CHAP-Challenge = 0x14fabff364f33d09f97a7992e7658be9(0) CHAP-Password = 0x011ad42c708f1b1279142669b5d1d20f23(0) NAS-Identifier = "Main_Router"(0) NAS-IP-Address = 192.168.0.1(0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default(0) authorize {(0) policy filter_username {(0) if (&User-Name) {(0) if (&User-Name) -> TRUE(0) if (&User-Name) {(0) if (&User-Name =~ / /) {(0) if (&User-Name =~ / /) -> FALSE(0) if (&User-Name =~ /@[^@]*@/ ) {(0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE(0) if (&User-Name =~ /\.\./ ) {(0) if (&User-Name =~ /\.\./ ) -> FALSE(0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {(0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE(0) if (&User-Name =~ /\.$/) {(0) if (&User-Name =~ /\.$/) -> FALSE(0) if (&User-Name =~ /@\./) {(0) if (&User-Name =~ /@\./) -> FALSE(0) } # if (&User-Name) = notfound(0) } # policy filter_username = notfound(0) [preprocess] = ok(0) chap: &control:Auth-Type := CHAP(0) [chap] = ok(0) [mschap] = noop(0) [digest] = noop(0) suffix: Checking for suffix after "@"(0) suffix: No '@' in User-Name = "test", looking up realm NULL(0) suffix: No such realm "NULL"(0) [suffix] = noop(0) eap: No EAP-Message, not doing EAP(0) [eap] = noop(0) files: users: Matched entry DEFAULT at line 181(0) [files] = ok(0) sql: EXPAND %{User-Name}(0) sql: --> test(0) sql: SQL-User-Name set to 'test'rlm_sql (sql): Reserved connection (1)(0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id(0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id(0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id(0) sql: User found in radcheck table(0) sql: Conditional check items matched, merging assignment check items(0) sql: Cleartext-Password := "123456"(0) sql: EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id(0) sql: --> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id(0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id(0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority(0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority(0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority(0) sql: User found in the group table(0) sql: EXPAND SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id(0) sql: --> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '1' ORDER BY id(0) sql: Executing select query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '1' ORDER BY id(0) sql: Group "1": Conditional check items matched(0) sql: Group "1": Merging assignment check items(0) sql: Simultaneous-Use := 1(0) sql: EXPAND SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id(0) sql: --> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '1' ORDER BY id(0) sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '1' ORDER BY id(0) sql: Group "1": Merging reply itemsrlm_sql (sql): Released connection (1)rlm_sql (sql): Need 4 more connections to reach 10 sparesrlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots usedrlm_sql_mysql: Starting connect to MySQL serverrlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.6.25, protocol version 10(0) [sql] = ok(0) [expiration] = noop(0) [logintime] = noop(0) pap: WARNING: Auth-Type already set. Not setting to PAP(0) [pap] = noop(0) } # authorize = ok(0) Found Auth-Type = CHAP(0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default(0) Auth-Type CHAP {(0) chap: Comparing with "known good" Cleartext-Password(0) chap: CHAP user "test" authenticated successfully(0) [chap] = ok(0) } # Auth-Type CHAP = ok(0) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default(0) session {(0) sql: EXPAND %{User-Name}(0) sql: --> test(0) sql: SQL-User-Name set to 'test'(0) sql: EXPAND SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL(0) sql: --> SELECT COUNT(*) FROM radacct WHERE username = 'test' AND acctstoptime IS NULLrlm_sql (sql): Reserved connection (2)(0) sql: Executing select query: SELECT COUNT(*) FROM radacct WHERE username = 'test' AND acctstoptime IS NULL(0) sql: EXPAND SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL(0) sql: --> SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = 'test' AND acctstoptime IS NULL(0) sql: Executing select query: SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = 'test' AND acctstoptime IS NULL-r: not found(0) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default(0) preacct {(0) [preprocess] = ok(0) policy acct_unique {(0) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) {(0) EXPAND %{string:Class}(0) -->(0) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) -> FALSE(0) else {(0) update request {(0) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}(0) --> 28b1b845bc61bf9ac3794bceaff7f323(0) &Acct-Unique-Session-Id := 28b1b845bc61bf9ac3794bceaff7f323(0) } # update request = noop(0) EXPAND %{User-Name}(0) --> test(0) EXPAND %{Acct-Session-ID}(0) --> 819000bd(0) EXPAND %{NAS-IPv6-Address}(0) -->(0) EXPAND %{NAS-IP-Address}(0) --> 192.168.0.1(0) EXPAND %{NAS-Identifier}(0) -->(0) EXPAND %{NAS-Port-ID}(0) -->(0) EXPAND %{NAS-Port}(0) --> 0(0) } # else = noop(0) } # policy acct_unique = noop(0) suffix: Checking for suffix after "@"(0) suffix: No '@' in User-Name = "test", looking up realm NULL(0) suffix: No such realm "NULL"(0) [suffix] = noop(0) [files] = noop(0) } # preacct = ok(0) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default(0) accounting {(0) detail: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d(0) detail: --> /usr/local/var/log/radius/radacct/192.168.0.1/detail-20160208(0) detail: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.0.1/detail-20160208(0) detail: EXPAND %t(0) detail: --> Mon Feb 8 06:17:14 2016(0) [detail] = ok(0) [unix] = ok(0) sql: EXPAND %{tolower:type.%{Acct-Status-Type}.query}(0) sql: --> type.stop.query(0) sql: Using query template 'query'rlm_sql (sql): Reserved connection (3)(0) sql: EXPAND %{User-Name}(0) sql: --> test(0) sql: SQL-User-Name set to 'test'(0) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'(0) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1454919434), acctsessiontime = 0, acctinputoctets = '0' << 32 | '0', acctoutputoctets = '0' << 32 | '0', acctterminatecause = '', connectinfo_stop = '' WHERE AcctUniqueId = '28b1b845bc61bf9ac3794bceaff7f323'(0) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1454919434), acctsessiontime = 0, acctinputoctets = '0' << 32 | '0', acctoutputoctets = '0' << 32 | '0', acctterminatecause = '', connectinfo_stop = '' WHERE AcctUniqueId = '28b1b845bc61bf9ac3794bceaff7f323'rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0(0) sql: SQL query returned: success(0) sql: 0 record(s) updated(0) sql: Trying next query...(0) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp} - %{%{Acct-Session-Time}:-0}), FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), %{%{Acct-Session-Time}:-NULL}, '%{Acct-Authentic}', '', '%{Connect-Info}', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')(0) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('819000bd', '28b1b845bc61bf9ac3794bceaff7f323', 'test', '', '192.168.0.1', '0', '', FROM_UNIXTIME(1454919434 - 0), FROM_UNIXTIME(1454919434), FROM_UNIXTIME(1454919434), 0, '', '', '', '0' << 32 | '0', '0' << 32 | '0', '', '', '', 'Framed-User', 'PPP', '')(0) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('819000bd', '28b1b845bc61bf9ac3794bceaff7f323', 'test', '', '192.168.0.1', '0', '', FROM_UNIXTIME(1454919434 - 0), FROM_UNIXTIME(1454919434), FROM_UNIXTIME(1454919434), 0, '', '', '', '0' << 32 | '0', '0' << 32 | '0', '', '', '', 'Framed-User', 'PPP', '')(0) sql: SQL query returned: success(0) sql: 1 record(s) updatedrlm_sql (sql): Released connection (3)(0) [sql] = ok(0) [exec] = noop(0) attr_filter.accounting_response: EXPAND %{User-Name}(0) attr_filter.accounting_response: --> test(0) attr_filter.accounting_response: Matched entry DEFAULT at line 12(0) [attr_filter.accounting_response] = updated(0) } # accounting = updatedrlm_sql (sql): Released connection (2)(0) [sql] = ok(0) } # session = ok(0) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default(0) post-auth {(0) update {(0) No attributes updated(0) } # update = noop(0) sql: EXPAND .query(0) sql: --> .query(0) sql: Using query template 'query'rlm_sql (sql): Reserved connection (4)(0) sql: EXPAND %{User-Name}(0) sql: --> test(0) sql: SQL-User-Name set to 'test'(0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')(0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', '0x011ad42c708f1b1279142669b5d1d20f23', 'Access-Accept', '2016-02-08 06:17:14')(0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'test', '0x011ad42c708f1b1279142669b5d1d20f23', 'Access-Accept', '2016-02-08 06:17:14')(0) sql: SQL query returned: success(0) sql: 1 record(s) updatedrlm_sql (sql): Released connection (4)(0) [sql] = ok(0) [exec] = noop(0) policy remove_reply_message_if_eap {(0) if (&reply:EAP-Message && &reply:Reply-Message) {(0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE(0) else {(0) [noop] = noop(0) } # else = noop(0) } # policy remove_reply_message_if_eap = noop(0) } # post-auth = ok(0) Sent Access-Accept Id 253 from 192.168.0.98:1812 to 192.168.0.1:36215 length 0(0) Framed-Protocol = PPP(0) Framed-Compression = Van-Jacobson-TCP-IP(0) Finished requestWaking up in 4.9 seconds.(1) Received Accounting-Request Id 254 from 192.168.0.1:58808 to 192.168.0.98:1813 length 147(1) Service-Type = Framed-User(1) Framed-Protocol = PPP(1) NAS-Port = 15729402(1) NAS-Port-Type = Ethernet(1) User-Name = "test"(1) Calling-Station-Id = "C0:4A:00:87:C6:D9"(1) Called-Station-Id = "service1"(1) NAS-Port-Id = "bridge1"(1) Acct-Session-Id = "819000be"(1) Framed-IP-Address = 0.0.0.0(1) Acct-Authentic = RADIUS(1) Event-Timestamp = "Feb 7 2016 19:55:39 BRST"(1) Acct-Status-Type = Start(1) NAS-Identifier = "Main_Router"(1) Acct-Delay-Time = 0(1) NAS-IP-Address = 192.168.0.1(1) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default(1) preacct {(1) [preprocess] = ok(1) policy acct_unique {(1) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) {(1) EXPAND %{string:Class}(1) -->(1) if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) -> FALSE(1) else {(1) update request {(1) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}(1) --> ece4bc8c0478e3bc6030a3666e0a14d7(1) &Acct-Unique-Session-Id := ece4bc8c0478e3bc6030a3666e0a14d7(1) } # update request = noop(1) EXPAND %{User-Name}(1) --> test(1) EXPAND %{Acct-Session-ID}(1) --> 819000be(1) EXPAND %{NAS-IPv6-Address}(1) -->(1) EXPAND %{NAS-IP-Address}(1) --> 192.168.0.1(1) EXPAND %{NAS-Identifier}(1) --> Main_Router(1) EXPAND %{NAS-Port-ID}(1) --> bridge1(1) EXPAND %{NAS-Port}(1) --> 15729402(1) } # else = noop(1) } # policy acct_unique = noop(1) suffix: Checking for suffix after "@"(1) suffix: No '@' in User-Name = "test", looking up realm NULL(1) suffix: No such realm "NULL"(1) [suffix] = noop(1) [files] = noop(1) } # preacct = ok(1) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default(1) accounting {(1) detail: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d(1) detail: --> /usr/local/var/log/radius/radacct/192.168.0.1/detail-20160208(1) detail: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.0.1/detail-20160208(1) detail: EXPAND %t(1) detail: --> Mon Feb 8 06:17:14 2016(1) [detail] = ok(1) [unix] = ok(1) sql: EXPAND %{tolower:type.%{Acct-Status-Type}.query}(1) sql: --> type.start.query(1) sql: Using query template 'query'rlm_sql (sql): Reserved connection (0)(1) sql: EXPAND %{User-Name}(1) sql: --> test(1) sql: SQL-User-Name set to 'test'(1) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')(1) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('819000be', 'ece4bc8c0478e3bc6030a3666e0a14d7', 'test', '', '192.168.0.1', 'bridge1', 'Ethernet', FROM_UNIXTIME(1454882139), FROM_UNIXTIME(1454882139), NULL, '0', 'RADIUS', '', '', '0', '0', 'service1', 'C0:4A:00:87:C6:D9', '', 'Framed-User', 'PPP', '0.0.0.0')(1) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('819000be', 'ece4bc8c0478e3bc6030a3666e0a14d7', 'test', '', '192.168.0.1', 'bridge1', 'Ethernet', FROM_UNIXTIME(1454882139), FROM_UNIXTIME(1454882139), NULL, '0', 'RADIUS', '', '', '0', '0', 'service1', 'C0:4A:00:87:C6:D9', '', 'Framed-User', 'PPP', '0.0.0.0')(1) sql: SQL query returned: success(1) sql: 1 record(s) updatedrlm_sql (sql): Released connection (0)(1) [sql] = ok(1) [exec] = noop(1) attr_filter.accounting_response: EXPAND %{User-Name}(1) attr_filter.accounting_response: --> test(1) attr_filter.accounting_response: Matched entry DEFAULT at line 12(1) [attr_filter.accounting_response] = updated(1) } # accounting = updated(1) Sent Accounting-Response Id 254 from 192.168.0.98:1813 to 192.168.0.1:58808 length 0(1) Finished request(1) Cleaning up request packet ID 254 with timestamp +7Waking up in 4.9 seconds.(0) Cleaning up request packet ID 253 with timestamp +7Ready to process requests ************my confs************** root@radius:/usr/local/etc/raddb/mods-available # radiusd -XServer was built with: accounting : yes authentication : yes ascend-binary-attributes : yes coa : yes control-socket : yes detail : yes dhcp : yes dynamic-clients : yes osfc2 : no proxy : yes regex-pcre : no regex-posix : yes regex-posix-extended : yes session-management : yes stats : yes tcp : yes threads : yes tls : yes unlang : yes vmps : yes developer : noServer core libs: freeradius-server : 3.0.11 talloc : 2.0.* ssl : 1.0.1p releaseEndianness: littleCompilation flags: cppflags : -isystem /usr/local/include/ cflags : -I/root/freeradius/freeradius-server-3.0.11 -I/root/freeradius/freeradius-server-3.0.11/src -include /root/freeradius/freeradius-server-3.0.11/src/freeradius-devel/autoconf.h -include /root/freeradius/freeradius-server-3.0.11/src/freeradius-devel/build.h -include /root/freeradius/freeradius-server-3.0.11/src/freeradius-devel/features.h -include /root/freeradius/freeradius-server-3.0.11/src/freeradius-devel/radpaths.h -fno-strict-aliasing -g -O2 -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1 ldflags : -L/usr/local/lib -Wl,-rpath,/usr/local/lib libs : -lcrypto -lssl -ltalloc -lexecinfo -lpthread -lreadline Copyright (C) 1999-2016 The FreeRADIUS server project and contributorsThere is NO warranty; not even for MERCHANTABILITY or FITNESS FOR APARTICULAR PURPOSEYou may redistribute copies of FreeRADIUS under the terms of theGNU General Public LicenseFor more information about these matters, see the file named COPYRIGHTStarting - reading configuration files ...including dictionary file /usr/local/share/freeradius/dictionaryincluding dictionary file /usr/local/share/freeradius/dictionary.dhcpincluding dictionary file /usr/local/share/freeradius/dictionary.vqpincluding dictionary file /usr/local/etc/raddb/dictionaryincluding configuration file /usr/local/etc/raddb/radiusd.confincluding configuration file /usr/local/etc/raddb/proxy.confincluding configuration file /usr/local/etc/raddb/clients.confincluding files in directory /usr/local/etc/raddb/mods-enabled/including configuration file /usr/local/etc/raddb/mods-enabled/alwaysincluding configuration file /usr/local/etc/raddb/mods-enabled/attr_filterincluding configuration file /usr/local/etc/raddb/mods-enabled/cache_eapincluding configuration file /usr/local/etc/raddb/mods-enabled/chapincluding configuration file /usr/local/etc/raddb/mods-enabled/detailincluding configuration file /usr/local/etc/raddb/mods-enabled/detail.logincluding configuration file /usr/local/etc/raddb/mods-enabled/digestincluding configuration file /usr/local/etc/raddb/mods-enabled/dhcpincluding configuration file /usr/local/etc/raddb/mods-enabled/dynamic_clientsincluding configuration file /usr/local/etc/raddb/mods-enabled/eapincluding configuration file /usr/local/etc/raddb/mods-enabled/echoincluding configuration file /usr/local/etc/raddb/mods-enabled/execincluding configuration file /usr/local/etc/raddb/mods-enabled/expirationincluding configuration file /usr/local/etc/raddb/mods-enabled/exprincluding configuration file /usr/local/etc/raddb/mods-enabled/filesincluding configuration file /usr/local/etc/raddb/mods-enabled/linelogincluding configuration file /usr/local/etc/raddb/mods-enabled/logintimeincluding configuration file /usr/local/etc/raddb/mods-enabled/mschapincluding configuration file /usr/local/etc/raddb/mods-enabled/ntlm_authincluding configuration file /usr/local/etc/raddb/mods-enabled/papincluding configuration file /usr/local/etc/raddb/mods-enabled/passwdincluding configuration file /usr/local/etc/raddb/mods-enabled/preprocessincluding configuration file /usr/local/etc/raddb/mods-enabled/radutmpincluding configuration file /usr/local/etc/raddb/mods-enabled/realmincluding configuration file /usr/local/etc/raddb/mods-enabled/replicateincluding configuration file /usr/local/etc/raddb/mods-enabled/sohincluding configuration file /usr/local/etc/raddb/mods-enabled/sradutmpincluding configuration file /usr/local/etc/raddb/mods-enabled/unixincluding configuration file /usr/local/etc/raddb/mods-enabled/unpackincluding configuration file /usr/local/etc/raddb/mods-enabled/utf8including configuration file /usr/local/etc/raddb/mods-enabled/sqlincluding configuration file /usr/local/etc/raddb/mods-config/sql/main/mysql/queries.confincluding files in directory /usr/local/etc/raddb/policy.d/including configuration file /usr/local/etc/raddb/policy.d/abfab-trincluding configuration file /usr/local/etc/raddb/policy.d/accountingincluding configuration file /usr/local/etc/raddb/policy.d/canonicalizationincluding configuration file /usr/local/etc/raddb/policy.d/controlincluding configuration file /usr/local/etc/raddb/policy.d/cuiincluding configuration file /usr/local/etc/raddb/policy.d/debugincluding configuration file /usr/local/etc/raddb/policy.d/dhcpincluding configuration file /usr/local/etc/raddb/policy.d/eapincluding configuration file /usr/local/etc/raddb/policy.d/filterincluding configuration file /usr/local/etc/raddb/policy.d/operator-nameincluding files in directory /usr/local/etc/raddb/sites-enabled/including configuration file /usr/local/etc/raddb/sites-enabled/defaultincluding configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnelmain { security { allow_core_dumps = no } name = "radiusd" prefix = "/usr/local" localstatedir = "/usr/local/var" logdir = "/usr/local/var/log/radius" run_dir = "/usr/local/var/run/radiusd"}main { name = "radiusd" prefix = "/usr/local" localstatedir = "/usr/local/var" sbindir = "/usr/local/sbin" logdir = "/usr/local/var/log/radius" run_dir = "/usr/local/var/run/radiusd" libdir = "/usr/local/lib" radacctdir = "/usr/local/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 16384 pidfile = "/usr/local/var/run/radiusd/radiusd.pid" checkrad = "/usr/local/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no colourise = yes msg_denied = "You are already logged in - access denied" } resources { } security { max_attributes = 200 reject_delay = 1.000000 status_server = yes allow_vulnerable_openssl = "no" }}radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = <<< secret >>> response_window = 20.000000 response_timeouts = 1 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 check_timeout = 4 num_answers_to_alive = 3 revive_interval = 120 limit { max_connections = 16 max_requests = 0 lifetime = 0 idle_timeout = 0 } coa { irt = 2 mrt = 16 mrc = 5 mrd = 30 } } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { }radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = <<< secret >>> nas_type = "other" proto = "*" limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } client localhost_ipv6 { ipv6addr = ::1 require_message_authenticator = no secret = <<< secret >>> limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } }Debugger not attached # Creating Auth-Type = PAP # Creating Auth-Type = CHAP # Creating Auth-Type = MS-CHAP # Creating Auth-Type = digest # Creating Auth-Type = eapradiusd: #### Instantiating modules #### modules { # Loaded module rlm_always # Loading module "reject" from file /usr/local/etc/raddb/mods-enabled/always always reject { rcode = "reject" simulcount = 0 mpp = no } # Loading module "fail" from file /usr/local/etc/raddb/mods-enabled/always always fail { rcode = "fail" simulcount = 0 mpp = no } # Loading module "ok" from file /usr/local/etc/raddb/mods-enabled/always always ok { rcode = "ok" simulcount = 0 mpp = no } # Loading module "handled" from file /usr/local/etc/raddb/mods-enabled/always always handled { rcode = "handled" simulcount = 0 mpp = no } # Loading module "invalid" from file /usr/local/etc/raddb/mods-enabled/always always invalid { rcode = "invalid" simulcount = 0 mpp = no } # Loading module "userlock" from file /usr/local/etc/raddb/mods-enabled/always always userlock { rcode = "userlock" simulcount = 0 mpp = no } # Loading module "notfound" from file /usr/local/etc/raddb/mods-enabled/always always notfound { rcode = "notfound" simulcount = 0 mpp = no } # Loading module "noop" from file /usr/local/etc/raddb/mods-enabled/always always noop { rcode = "noop" simulcount = 0 mpp = no } # Loading module "updated" from file /usr/local/etc/raddb/mods-enabled/always always updated { rcode = "updated" simulcount = 0 mpp = no } # Loaded module rlm_attr_filter # Loading module "attr_filter.post-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.post-proxy { filename = "/usr/local/etc/raddb/mods-config/attr_filter/post-proxy" key = "%{Realm}" relaxed = no } # Loading module "attr_filter.pre-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.pre-proxy { filename = "/usr/local/etc/raddb/mods-config/attr_filter/pre-proxy" key = "%{Realm}" relaxed = no } # Loading module "attr_filter.access_reject" from file /usr/local/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.access_reject { filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_reject" key = "%{User-Name}" relaxed = no } # Loading module "attr_filter.access_challenge" from file /usr/local/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.access_challenge { filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_challenge" key = "%{User-Name}" relaxed = no } # Loading module "attr_filter.accounting_response" from file /usr/local/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.accounting_response { filename = "/usr/local/etc/raddb/mods-config/attr_filter/accounting_response" key = "%{User-Name}" relaxed = no } # Loaded module rlm_cache # Loading module "cache_eap" from file /usr/local/etc/raddb/mods-enabled/cache_eap cache cache_eap { driver = "rlm_cache_rbtree" key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" ttl = 15 max_entries = 0 epoch = 0 add_stats = no } # Loaded module rlm_chap # Loading module "chap" from file /usr/local/etc/raddb/mods-enabled/chap # Loaded module rlm_detail # Loading module "detail" from file /usr/local/etc/raddb/mods-enabled/detail detail { filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loading module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.log detail auth_log { filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loading module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log detail reply_log { filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loading module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log detail pre_proxy_log { filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loading module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log detail post_proxy_log { filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" header = "%t" permissions = 384 locking = no escape_filenames = no log_packet_header = no } # Loaded module rlm_digest # Loading module "digest" from file /usr/local/etc/raddb/mods-enabled/digest # Loaded module rlm_dhcp # Loading module "dhcp" from file /usr/local/etc/raddb/mods-enabled/dhcp # Loaded module rlm_dynamic_clients # Loading module "dynamic_clients" from file /usr/local/etc/raddb/mods-enabled/dynamic_clients # Loaded module rlm_eap # Loading module "eap" from file /usr/local/etc/raddb/mods-enabled/eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 16384 } # Loaded module rlm_exec # Loading module "echo" from file /usr/local/etc/raddb/mods-enabled/echo exec echo { wait = yes program = "/bin/echo %{User-Name}" input_pairs = "request" output_pairs = "reply" shell_escape = yes } # Loading module "exec" from file /usr/local/etc/raddb/mods-enabled/exec exec { wait = no input_pairs = "request" shell_escape = yes timeout = 10 } # Loaded module rlm_expiration # Loading module "expiration" from file /usr/local/etc/raddb/mods-enabled/expiration # Loaded module rlm_expr # Loading module "expr" from file /usr/local/etc/raddb/mods-enabled/expr expr { safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" } # Loaded module rlm_files # Loading module "files" from file /usr/local/etc/raddb/mods-enabled/files files { filename = "/usr/local/etc/raddb/mods-config/files/authorize" acctusersfile = "/usr/local/etc/raddb/mods-config/files/accounting" preproxy_usersfile = "/usr/local/etc/raddb/mods-config/files/pre-proxy" } # Loaded module rlm_linelog # Loading module "linelog" from file /usr/local/etc/raddb/mods-enabled/linelog linelog { filename = "/usr/local/var/log/radius/linelog" escape_filenames = no syslog_severity = "info" permissions = 384 format = "This is a log message for %{User-Name}" reference = "messages.%{%{reply:Packet-Type}:-default}" } # Loading module "log_accounting" from file /usr/local/etc/raddb/mods-enabled/linelog linelog log_accounting { filename = "/usr/local/var/log/radius/linelog-accounting" escape_filenames = no syslog_severity = "info" permissions = 384 format = "" reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" } # Loaded module rlm_logintime # Loading module "logintime" from file /usr/local/etc/raddb/mods-enabled/logintime logintime { minimum_timeout = 60 } # Loaded module rlm_mschap # Loading module "mschap" from file /usr/local/etc/raddb/mods-enabled/mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = yes passchange { } allow_retry = yes } # Loading module "ntlm_auth" from file /usr/local/etc/raddb/mods-enabled/ntlm_auth exec ntlm_auth { wait = yes program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" shell_escape = yes } # Loaded module rlm_pap # Loading module "pap" from file /usr/local/etc/raddb/mods-enabled/pap pap { normalise = yes } # Loaded module rlm_passwd # Loading module "etc_passwd" from file /usr/local/etc/raddb/mods-enabled/passwd passwd etc_passwd { filename = "/etc/passwd" format = "*User-Name:Crypt-Password:" delimiter = ":" ignore_nislike = no ignore_empty = yes allow_multiple_keys = no hash_size = 100 } # Loaded module rlm_preprocess # Loading module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess preprocess { huntgroups = "/usr/local/etc/raddb/mods-config/preprocess/huntgroups" hints = "/usr/local/etc/raddb/mods-config/preprocess/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } # Loaded module rlm_radutmp # Loading module "radutmp" from file /usr/local/etc/raddb/mods-enabled/radutmp radutmp { filename = "/usr/local/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes permissions = 384 caller_id = yes } # Loaded module rlm_realm # Loading module "IPASS" from file /usr/local/etc/raddb/mods-enabled/realm realm IPASS { format = "prefix" delimiter = "/" ignore_default = no ignore_null = no } # Loading module "suffix" from file /usr/local/etc/raddb/mods-enabled/realm realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } # Loading module "realmpercent" from file /usr/local/etc/raddb/mods-enabled/realm realm realmpercent { format = "suffix" delimiter = "%" ignore_default = no ignore_null = no } # Loading module "ntdomain" from file /usr/local/etc/raddb/mods-enabled/realm realm ntdomain { format = "prefix" delimiter = "\\" ignore_default = no ignore_null = no } # Loaded module rlm_replicate # Loading module "replicate" from file /usr/local/etc/raddb/mods-enabled/replicate # Loaded module rlm_soh # Loading module "soh" from file /usr/local/etc/raddb/mods-enabled/soh soh { dhcp = yes } # Loading module "sradutmp" from file /usr/local/etc/raddb/mods-enabled/sradutmp radutmp sradutmp { filename = "/usr/local/var/log/radius/sradutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes permissions = 420 caller_id = no } # Loaded module rlm_unix # Loading module "unix" from file /usr/local/etc/raddb/mods-enabled/unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" }Creating attribute Unix-Group # Loaded module rlm_unpack # Loading module "unpack" from file /usr/local/etc/raddb/mods-enabled/unpack # Loaded module rlm_utf8 # Loading module "utf8" from file /usr/local/etc/raddb/mods-enabled/utf8 # Loaded module rlm_sql # Loading module "sql" from file /usr/local/etc/raddb/mods-enabled/sql sql { driver = "rlm_sql_mysql" server = "localhost" port = 3306 login = "root" password = <<< secret >>> radius_db = "radius" read_groups = yes read_profiles = yes read_clients = yes delete_stale_sessions = yes sql_user_name = "%{User-Name}" default_user_profile = "" client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id" group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" accounting { reference = "%{tolower:type.%{Acct-Status-Type}.query}" type { accounting-on { query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})" } accounting-off { query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})" } start { query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')" } interim-update { query = "UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" } stop { query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" } } } post-auth { reference = ".query" query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" } }rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linkedCreating attribute SQL-Group instantiate { } # Instantiating module "reject" from file /usr/local/etc/raddb/mods-enabled/always # Instantiating module "fail" from file /usr/local/etc/raddb/mods-enabled/always # Instantiating module "ok" from file /usr/local/etc/raddb/mods-enabled/always # Instantiating module "handled" from file /usr/local/etc/raddb/mods-enabled/always # Instantiating module "invalid" from file /usr/local/etc/raddb/mods-enabled/always # Instantiating module "userlock" from file /usr/local/etc/raddb/mods-enabled/always # Instantiating module "notfound" from file /usr/local/etc/raddb/mods-enabled/always # Instantiating module "noop" from file /usr/local/etc/raddb/mods-enabled/always # Instantiating module "updated" from file /usr/local/etc/raddb/mods-enabled/always # Instantiating module "attr_filter.post-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filterreading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/post-proxy # Instantiating module "attr_filter.pre-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filterreading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/pre-proxy # Instantiating module "attr_filter.access_reject" from file /usr/local/etc/raddb/mods-enabled/attr_filterreading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/access_reject[/usr/local/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay" found in filter list for realm "DEFAULT".[/usr/local/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay-USec" found in filter list for realm "DEFAULT". # Instantiating module "attr_filter.access_challenge" from file /usr/local/etc/raddb/mods-enabled/attr_filterreading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/access_challenge # Instantiating module "attr_filter.accounting_response" from file /usr/local/etc/raddb/mods-enabled/attr_filterreading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/accounting_response # Instantiating module "cache_eap" from file /usr/local/etc/raddb/mods-enabled/cache_eaprlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked # Instantiating module "detail" from file /usr/local/etc/raddb/mods-enabled/detail # Instantiating module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.logrlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output # Instantiating module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log # Instantiating module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log # Instantiating module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log # Instantiating module "eap" from file /usr/local/etc/raddb/mods-enabled/eap # Linked to sub-module rlm_eap_md5 # Linked to sub-module rlm_eap_leap # Linked to sub-module rlm_eap_gtc gtc { challenge = "Password: " auth_type = "PAP" } # Linked to sub-module rlm_eap_tls tls { tls = "tls-common" } tls-config tls-common { verify_depth = 0 ca_path = "/usr/local/etc/raddb/certs" pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server.pem" certificate_file = "/usr/local/etc/raddb/certs/server.pem" ca_file = "/usr/local/etc/raddb/certs/ca.pem" private_key_password = <<< secret >>> dh_file = "/usr/local/etc/raddb/certs/dh" fragment_size = 1024 include_length = yes auto_chain = yes check_crl = no check_all_crl = no cipher_list = "DEFAULT" ecdh_curve = "prime256v1" cache { enable = yes lifetime = 24 max_entries = 255 } verify { skip_if_ocsp_ok = no } ocsp { enable = no override_cert_url = yes url = "http://127.0.0.1/ocsp/" use_nonce = yes timeout = 0 softfail = no } } # Linked to sub-module rlm_eap_ttls ttls { tls = "tls-common" default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes require_client_cert = no }tls: Using cached TLS configuration from previous invocation # Linked to sub-module rlm_eap_peap peap { tls = "tls-common" default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no require_client_cert = no }tls: Using cached TLS configuration from previous invocation # Linked to sub-module rlm_eap_mschapv2 mschapv2 { with_ntdomain_hack = no send_error = no } # Instantiating module "expiration" from file /usr/local/etc/raddb/mods-enabled/expiration # Instantiating module "files" from file /usr/local/etc/raddb/mods-enabled/filesreading pairlist file /usr/local/etc/raddb/mods-config/files/authorizereading pairlist file /usr/local/etc/raddb/mods-config/files/accountingreading pairlist file /usr/local/etc/raddb/mods-config/files/pre-proxy # Instantiating module "linelog" from file /usr/local/etc/raddb/mods-enabled/linelog # Instantiating module "log_accounting" from file /usr/local/etc/raddb/mods-enabled/linelog # Instantiating module "logintime" from file /usr/local/etc/raddb/mods-enabled/logintime # Instantiating module "mschap" from file /usr/local/etc/raddb/mods-enabled/mschaprlm_mschap (mschap): using internal authentication # Instantiating module "pap" from file /usr/local/etc/raddb/mods-enabled/pap # Instantiating module "etc_passwd" from file /usr/local/etc/raddb/mods-enabled/passwdrlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no # Instantiating module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocessreading pairlist file /usr/local/etc/raddb/mods-config/preprocess/huntgroupsreading pairlist file /usr/local/etc/raddb/mods-config/preprocess/hints # Instantiating module "IPASS" from file /usr/local/etc/raddb/mods-enabled/realm # Instantiating module "suffix" from file /usr/local/etc/raddb/mods-enabled/realm # Instantiating module "realmpercent" from file /usr/local/etc/raddb/mods-enabled/realm # Instantiating module "ntdomain" from file /usr/local/etc/raddb/mods-enabled/realm # Instantiating module "sql" from file /usr/local/etc/raddb/mods-enabled/sqlrlm_sql_mysql: libmysql version: 5.6.25 mysql { tls { } warnings = "auto" }rlm_sql (sql): Attempting to connect to database "radius"rlm_sql (sql): Initialising connection pool pool { start = 5 min = 3 max = 32 spare = 10 uses = 0 lifetime = 0 cleanup_interval = 30 idle_timeout = 60 retry_delay = 30 spread = no }rlm_sql (sql): Opening additional connection (0), 1 of 32 pending slots usedrlm_sql_mysql: Starting connect to MySQL serverrlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.6.25, protocol version 10rlm_sql (sql): Opening additional connection (1), 1 of 31 pending slots usedrlm_sql_mysql: Starting connect to MySQL serverrlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.6.25, protocol version 10rlm_sql (sql): Opening additional connection (2), 1 of 30 pending slots usedrlm_sql_mysql: Starting connect to MySQL serverrlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.6.25, protocol version 10rlm_sql (sql): Opening additional connection (3), 1 of 29 pending slots usedrlm_sql_mysql: Starting connect to MySQL serverrlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.6.25, protocol version 10rlm_sql (sql): Opening additional connection (4), 1 of 28 pending slots usedrlm_sql_mysql: Starting connect to MySQL serverrlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.6.25, protocol version 10rlm_sql (sql): Processing generate_sql_clientsrlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nasrlm_sql (sql): Reserved connection (0)rlm_sql (sql): Executing select query: SELECT id, nasname, shortname, type, secret, server FROM nasrlm_sql (sql): Adding client 192.168.0.1 (123231) to global clients listrlm_sql (192.168.0.1): Client "123231" (sql) addedrlm_sql (sql): Released connection (0)rlm_sql (sql): Need 5 more connections to reach 10 sparesrlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots usedrlm_sql_mysql: Starting connect to MySQL serverrlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.6.25, protocol version 10 } # modulesradiusd: #### Loading Virtual Servers ####server { # from file /usr/local/etc/raddb/radiusd.conf} # serverserver default { # from file /usr/local/etc/raddb/sites-enabled/default # Loading authenticate {...} # Loading authorize {...}Ignoring "ldap" (see raddb/mods-available/README.rst) # Loading preacct {...} # Loading accounting {...} # Loading session {...} # Loading post-proxy {...} # Loading post-auth {...}} # server defaultserver inner-tunnel { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel # Loading authenticate {...} # Loading authorize {...} # Loading session {...} # Loading post-proxy {...} # Loading post-auth {...}} # server inner-tunnelradiusd: #### Opening IP addresses and Ports ####listen { type = "auth" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 }}listen { type = "acct" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 }}listen { type = "auth" ipv6addr = :: port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 }}listen { type = "acct" ipv6addr = :: port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 }}listen { type = "auth" ipaddr = 127.0.0.1 port = 18120}Listening on auth address * port 1812 bound to server defaultListening on acct address * port 1813 bound to server defaultListening on auth address :: port 1812 bound to server defaultListening on acct address :: port 1813 bound to server defaultListening on auth address 127.0.0.1 port 18120 bound to server inner-tunnelListening on proxy address * port 33450Listening on proxy address :: port 27993Ready to process requests Thank you! Best RegardsFabricio