reading config from /etc/radsecproxy.conf reading config file /etc/radsecproxy.conf getgenericconfig: listenTLS = *:2083 getgenericconfig: SourceUDP = *:33000 getgenericconfig: ListenUDP = *:1830 getgenericconfig: SourceTLS = *:33001 getgenericconfig: LogLevel = 4 getgenericconfig: LogDestination = file:///var/log/radsecproxy.log conftls_cb called for tls default getgenericconfig: block tls default: CACertificateFile = /etc/freeradius/certs/radsec/ca.crt getgenericconfig: block tls default: CertificateFile = /etc/freeradius/certs/radsec/federacao.crt getgenericconfig: block tls default: CertificateKeyFile = /etc/freeradius/certs/radsec/federacao.key tlsaddcacrl: updated TLS context default tlscreatectx: created TLS context default conftls_cb: added TLS block default confclient_cb called for client localhost getgenericconfig: block client localhost: host = localhost getgenericconfig: block client localhost: type = udp getgenericconfig: block client localhost: secret = eduroam getgenericconfig: block client localhost: certificateNameCheck = off resolvehostport: localhost -> ::1 confclient_cb called for client 200.131.219.102 getgenericconfig: block client 200.131.219.102: host = 200.131.219.102 getgenericconfig: block client 200.131.219.102: type = tls getgenericconfig: block client 200.131.219.102: secret = radsec getgenericconfig: block client 200.131.219.102: certificateNameCheck = off resolvehostport: 200.131.219.102 -> 200.131.219.102 confclient_cb called for client homolog-idp.rnp.br getgenericconfig: block client homolog-idp.rnp.br: host = homolog-idp.rnp.br getgenericconfig: block client homolog-idp.rnp.br: type = tls getgenericconfig: block client homolog-idp.rnp.br: secret = radsec getgenericconfig: block client homolog-idp.rnp.br: certificateNameCheck = off resolvehostport: homolog-idp.rnp.br -> 200.130.15.24 confclient_cb called for client 200.17.116.253 getgenericconfig: block client 200.17.116.253: host = 200.17.116.253 getgenericconfig: block client 200.17.116.253: type = tls getgenericconfig: block client 200.17.116.253: secret = radsec getgenericconfig: block client 200.17.116.253: certificateNameCheck = off resolvehostport: 200.17.116.253 -> 200.17.116.253 confclient_cb called for client 200.130.15.22 getgenericconfig: block client 200.130.15.22: host = 200.130.15.22 getgenericconfig: block client 200.130.15.22: type = tls getgenericconfig: block client 200.130.15.22: secret = radsec getgenericconfig: block client 200.130.15.22: certificateNameCheck = off resolvehostport: 200.130.15.22 -> 200.130.15.22 confclient_cb called for client homolog-tlr.rnp.br getgenericconfig: block client homolog-tlr.rnp.br: host = homolog-tlr.rnp.br getgenericconfig: block client homolog-tlr.rnp.br: type = udp getgenericconfig: block client homolog-tlr.rnp.br: secret = eduroam getgenericconfig: block client homolog-tlr.rnp.br: certificateNameCheck = off resolvehostport: homolog-tlr.rnp.br -> 200.130.15.25 confclient_cb called for client eduroam.unipampa.edu.br getgenericconfig: block client eduroam.unipampa.edu.br: host = eduroam.unipampa.edu.br getgenericconfig: block client eduroam.unipampa.edu.br: type = tls getgenericconfig: block client eduroam.unipampa.edu.br: secret = radsec getgenericconfig: block client eduroam.unipampa.edu.br: certificateNameCheck = off resolvehostport: eduroam.unipampa.edu.br -> 200.132.146.72 confserver_cb called for server 200.131.219.102 getgenericconfig: block server 200.131.219.102: host = 200.131.219.102 getgenericconfig: block server 200.131.219.102: type = tls getgenericconfig: block server 200.131.219.102: secret = radsec getgenericconfig: block server 200.131.219.102: certificateNameCheck = off resolvehostport: 200.131.219.102 -> 200.131.219.102 confserver_cb called for server homolog-idp.rnp.br getgenericconfig: block server homolog-idp.rnp.br: host = homolog-idp.rnp.br getgenericconfig: block server homolog-idp.rnp.br: type = tls getgenericconfig: block server homolog-idp.rnp.br: secret = radsec getgenericconfig: block server homolog-idp.rnp.br: certificateNameCheck = off resolvehostport: homolog-idp.rnp.br -> 200.130.15.24 confserver_cb called for server 200.17.116.253 getgenericconfig: block server 200.17.116.253: host = 200.17.116.253 getgenericconfig: block server 200.17.116.253: type = tls getgenericconfig: block server 200.17.116.253: secret = radsec getgenericconfig: block server 200.17.116.253: certificateNameCheck = off resolvehostport: 200.17.116.253 -> 200.17.116.253 confserver_cb called for server 200.130.15.22 getgenericconfig: block server 200.130.15.22: host = 200.130.15.22 getgenericconfig: block server 200.130.15.22: type = tls getgenericconfig: block server 200.130.15.22: secret = radsec getgenericconfig: block server 200.130.15.22: certificateNameCheck = off resolvehostport: 200.130.15.22 -> 200.130.15.22 confserver_cb called for server eduroam.unipampa.edu.br getgenericconfig: block server eduroam.unipampa.edu.br: host = eduroam.unipampa.edu.br getgenericconfig: block server eduroam.unipampa.edu.br: type = tls getgenericconfig: block server eduroam.unipampa.edu.br: secret = radsec getgenericconfig: block server eduroam.unipampa.edu.br: certificateNameCheck = off resolvehostport: eduroam.unipampa.edu.br -> 200.132.146.72 confserver_cb called for server homolog-tlr.rnp.br getgenericconfig: block server homolog-tlr.rnp.br: type = udp getgenericconfig: block server homolog-tlr.rnp.br: secret = eduroam getgenericconfig: block server homolog-tlr.rnp.br: certificateNameCheck = off resolvehostport: homolog-tlr.rnp.br -> 200.130.15.25 confrealm_cb called for realm /@ufjfteste\.br$ getgenericconfig: block realm /@ufjfteste\.br$: server = 200.131.219.102 addsrvconfs: added server 200.131.219.102 for realm /@ufjfteste\.br$ addrealm: added realm /@ufjfteste\.br$ confrealm_cb called for realm /@rnpteste\.br$ getgenericconfig: block realm /@rnpteste\.br$: server = homolog-idp.rnp.br addsrvconfs: added server homolog-idp.rnp.br for realm /@rnpteste\.br$ addrealm: added realm /@rnpteste\.br$ confrealm_cb called for realm /@pop-al\.br$ getgenericconfig: block realm /@pop-al\.br$: server = 200.17.116.253 addsrvconfs: added server 200.17.116.253 for realm /@pop-al\.br$ addrealm: added realm /@pop-al\.br$ confrealm_cb called for realm /@homolog-rnp\.br$ getgenericconfig: block realm /@homolog-rnp\.br$: server = 200.130.15.22 addsrvconfs: added server 200.130.15.22 for realm /@homolog-rnp\.br$ addrealm: added realm /@homolog-rnp\.br$ confrealm_cb called for realm /@unipampa\.edu\.br$ getgenericconfig: block realm /@unipampa\.edu\.br$: server = eduroam.unipampa.edu.br addsrvconfs: added server eduroam.unipampa.edu.br for realm /@unipampa\.edu\.br$ addrealm: added realm /@unipampa\.edu\.br$ confrealm_cb called for realm * getgenericconfig: block realm *: server = homolog-tlr.rnp.br addrealm: constructed regexp .* from * addsrvconfs: added server homolog-tlr.rnp.br for realm * addrealm: added realm * closing config file /etc/radsecproxy.conf Jul 13 17:23:13 2017: radsecproxy revision 1.6.5 starting Jul 13 17:23:13 2017: resolvehostport: (null) -> 0.0.0.0 Jul 13 17:23:13 2017: resolvehostport: (null) -> 0.0.0.0 Jul 13 17:23:13 2017: disable_DF_bit: disabling DF bit (Linux variant) Jul 13 17:23:13 2017: resolvehostport: (null) -> 0.0.0.0 Jul 13 17:23:13 2017: disable_DF_bit: disabling DF bit (Linux variant) Jul 13 17:23:13 2017: createlistener: listening for udp on *:1830 Jul 13 17:23:13 2017: resolvehostport: (null) -> 0.0.0.0 Jul 13 17:23:13 2017: createlistener: listening for tls on *:2083 Jul 13 17:23:13 2017: tlsconnect: called from clientwr Jul 13 17:23:13 2017: connecttcphostlist: trying to open TCP connection to eduroam.unipampa.edu.br port 2083 Jul 13 17:23:13 2017: tlsconnect: called from clientwr Jul 13 17:23:13 2017: connecttcphostlist: trying to open TCP connection to 200.130.15.22 port 2083 Jul 13 17:23:13 2017: udp server writer, waiting for signal Jul 13 17:23:13 2017: tlsconnect: called from clientwr Jul 13 17:23:13 2017: connecttcphostlist: trying to open TCP connection to 200.17.116.253 port 2083 Jul 13 17:23:13 2017: connecttcphostlist: TCP connection to 200.130.15.22 port 2083 up Jul 13 17:23:13 2017: tlsconnect: called from clientwr Jul 13 17:23:13 2017: connecttcphostlist: trying to open TCP connection to homolog-idp.rnp.br port 2083 Jul 13 17:23:13 2017: tlsconnect: called from clientwr Jul 13 17:23:13 2017: connecttcphostlist: trying to open TCP connection to 200.131.219.102 port 2083 Jul 13 17:23:13 2017: connecttoserver: connect failed Jul 13 17:23:13 2017: connecttcphostlist: failed Jul 13 17:23:13 2017: tlsconnect: TLS connection to 200.130.15.22 up Jul 13 17:23:13 2017: connecttcphostlist: TCP connection to 200.131.219.102 port 2083 up Jul 13 17:23:13 2017: connecttcphostlist: TCP connection to eduroam.unipampa.edu.br port 2083 up Jul 13 17:23:13 2017: tlsconnect: TLS connection to 200.131.219.102 up Jul 13 17:23:14 2017: tlsconnect: TLS connection to eduroam.unipampa.edu.br up Jul 13 17:23:15 2017: connecttcphostlist: trying to open TCP connection to homolog-idp.rnp.br port 2083 Jul 13 17:23:15 2017: connecttcphostlist: TCP connection to homolog-idp.rnp.br port 2083 up Jul 13 17:23:15 2017: tlsconnect: TLS connection to homolog-idp.rnp.br up Jul 13 17:23:36 2017: tlsservernew: incoming TLS connection from 200.131.219.102 Jul 13 17:23:36 2017: tlsserverrd: starting for 200.131.219.102 Jul 13 17:23:36 2017: tlsserverwr: starting for 200.131.219.102 Jul 13 17:23:36 2017: tlsserverwr: waiting for signal Jul 13 17:23:36 2017: radtlsget: got 161 bytes Jul 13 17:23:36 2017: tlsserverrd: got Radius message from 200.131.219.102 Jul 13 17:23:36 2017: buf2radmsg: message auth ok Jul 13 17:23:36 2017: radsrv: code 1, id 50 Jul 13 17:23:36 2017: Access-Request with username: eduroam@rnpteste.br Jul 13 17:23:36 2017: found matching realm: /@rnpteste\.br$ Jul 13 17:23:36 2017: found matching conf: homolog-idp.rnp.br Jul 13 17:23:36 2017: sendrq: inserting packet with id 0 in queue for homolog-idp.rnp.br Jul 13 17:23:36 2017: sendrq: signalling client writer Jul 13 17:23:36 2017: freerealm: called with refcount 3 Jul 13 17:23:36 2017: clientwr: got new request Jul 13 17:23:36 2017: clientradputtls: Sent 161 bytes, Radius packet of length 161 to TLS peer homolog-idp.rnp.br Jul 13 17:23:36 2017: radtlsget: got 83 bytes Jul 13 17:23:36 2017: buf2radmsg: message auth ok Jul 13 17:23:36 2017: got Access-Challenge message with id 0 Jul 13 17:23:36 2017: replyh: passing Access-Challenge to client 200.131.219.102 (200.131.219.102) Jul 13 17:23:36 2017: signalling server writer Jul 13 17:23:36 2017: freerq: called with refcount 3 Jul 13 17:23:36 2017: tlsserverwr: got signal Jul 13 17:23:36 2017: tlsserverwr: sent 83 bytes, Radius packet of length 83 to 200.131.219.102 Jul 13 17:23:36 2017: freerq: called with refcount 2 Jul 13 17:23:36 2017: tlsserverwr: waiting for signal Jul 13 17:23:37 2017: radtlsget: got 161 bytes Jul 13 17:23:37 2017: tlsserverrd: got Radius message from 200.131.219.102 Jul 13 17:23:37 2017: buf2radmsg: message auth ok Jul 13 17:23:37 2017: radsrv: code 1, id 140 Jul 13 17:23:37 2017: Access-Request with username: eduroam@rnpteste.br Jul 13 17:23:37 2017: found matching realm: /@rnpteste\.br$ Jul 13 17:23:37 2017: found matching conf: homolog-idp.rnp.br Jul 13 17:23:37 2017: sendrq: inserting packet with id 1 in queue for homolog-idp.rnp.br Jul 13 17:23:37 2017: sendrq: signalling client writer Jul 13 17:23:37 2017: freerealm: called with refcount 3 Jul 13 17:23:37 2017: clientwr: got new request Jul 13 17:23:37 2017: clientradputtls: Sent 161 bytes, Radius packet of length 161 to TLS peer homolog-idp.rnp.br Jul 13 17:23:37 2017: radtlsget: got 67 bytes Jul 13 17:23:37 2017: buf2radmsg: message auth ok Jul 13 17:23:37 2017: got Access-Challenge message with id 1 Jul 13 17:23:37 2017: replyh: passing Access-Challenge to client 200.131.219.102 (200.131.219.102) Jul 13 17:23:37 2017: signalling server writer Jul 13 17:23:37 2017: freerq: called with refcount 3 Jul 13 17:23:37 2017: tlsserverwr: got signal Jul 13 17:23:37 2017: tlsserverwr: sent 67 bytes, Radius packet of length 67 to 200.131.219.102 Jul 13 17:23:37 2017: freerq: called with refcount 2 Jul 13 17:23:37 2017: tlsserverwr: waiting for signal Jul 13 17:23:37 2017: radtlsget: got 464 bytes Jul 13 17:23:37 2017: tlsserverrd: got Radius message from 200.131.219.102 Jul 13 17:23:37 2017: buf2radmsg: message auth ok Jul 13 17:23:37 2017: radsrv: code 1, id 27 Jul 13 17:23:37 2017: Access-Request with username: eduroam@rnpteste.br Jul 13 17:23:37 2017: found matching realm: /@rnpteste\.br$ Jul 13 17:23:37 2017: found matching conf: homolog-idp.rnp.br Jul 13 17:23:37 2017: sendrq: inserting packet with id 2 in queue for homolog-idp.rnp.br Jul 13 17:23:37 2017: sendrq: signalling client writer Jul 13 17:23:37 2017: freerealm: called with refcount 3 Jul 13 17:23:37 2017: clientwr: got new request Jul 13 17:23:37 2017: clientradputtls: Sent 464 bytes, Radius packet of length 464 to TLS peer homolog-idp.rnp.br Jul 13 17:23:37 2017: radtlsget: got 1071 bytes Jul 13 17:23:37 2017: buf2radmsg: message auth ok Jul 13 17:23:37 2017: got Access-Challenge message with id 2 Jul 13 17:23:37 2017: replyh: passing Access-Challenge to client 200.131.219.102 (200.131.219.102) Jul 13 17:23:37 2017: signalling server writer Jul 13 17:23:37 2017: freerq: called with refcount 3 Jul 13 17:23:37 2017: tlsserverwr: got signal Jul 13 17:23:37 2017: tlsserverwr: sent 1071 bytes, Radius packet of length 1071 to 200.131.219.102 Jul 13 17:23:37 2017: freerq: called with refcount 2 Jul 13 17:23:37 2017: tlsserverwr: waiting for signal Jul 13 17:23:37 2017: radtlsget: connection lost Jul 13 17:23:37 2017: tlsserverrd: connection from 200.131.219.102 lost Jul 13 17:23:37 2017: tlsserverrd: waiting for writer to end Jul 13 17:23:37 2017: tlsserverwr: got signal Jul 13 17:23:37 2017: tlsserverwr: exiting as requested Jul 13 17:23:37 2017: tlsserverrd: reader for 200.131.219.102 exiting Jul 13 17:23:37 2017: freerq: called with refcount 1 Jul 13 17:23:37 2017: freerq: called with refcount 1 Jul 13 17:23:37 2017: freerq: called with refcount 1 Jul 13 17:23:40 2017: tlsservernew: incoming TLS connection from 200.131.219.102 Jul 13 17:23:40 2017: tlsserverrd: starting for 200.131.219.102 Jul 13 17:23:40 2017: tlsserverwr: starting for 200.131.219.102 Jul 13 17:23:40 2017: tlsserverwr: waiting for signal Jul 13 17:23:40 2017: radtlsget: got 464 bytes Jul 13 17:23:40 2017: tlsserverrd: got Radius message from 200.131.219.102 Jul 13 17:23:40 2017: buf2radmsg: message auth ok Jul 13 17:23:40 2017: radsrv: code 1, id 1 Jul 13 17:23:40 2017: Access-Request with username: eduroam@rnpteste.br Jul 13 17:23:40 2017: found matching realm: /@rnpteste\.br$ Jul 13 17:23:40 2017: found matching conf: homolog-idp.rnp.br Jul 13 17:23:40 2017: sendrq: inserting packet with id 3 in queue for homolog-idp.rnp.br Jul 13 17:23:40 2017: sendrq: signalling client writer Jul 13 17:23:40 2017: freerealm: called with refcount 3 Jul 13 17:23:40 2017: clientwr: got new request Jul 13 17:23:40 2017: clientradputtls: Sent 464 bytes, Radius packet of length 464 to TLS peer homolog-idp.rnp.br Jul 13 17:23:41 2017: radtlsget: got 23 bytes Jul 13 17:23:41 2017: got Access-Reject message with id 3 Jul 13 17:23:41 2017: Access-Reject for user eduroam@rnpteste.br stationid 02-00-00-00-00-01 from homolog-idp.rnp.br to 200.131.219.102 (200.131.219.102) Jul 13 17:23:41 2017: replyh: passing Access-Reject to client 200.131.219.102 (200.131.219.102) Jul 13 17:23:41 2017: signalling server writer Jul 13 17:23:41 2017: freerq: called with refcount 3 Jul 13 17:23:41 2017: tlsserverwr: got signal Jul 13 17:23:41 2017: tlsserverwr: sent 23 bytes, Radius packet of length 23 to 200.131.219.102 Jul 13 17:23:41 2017: freerq: called with refcount 2 Jul 13 17:23:41 2017: tlsserverwr: waiting for signal Jul 13 17:23:43 2017: radtlsget: connection lost Jul 13 17:23:43 2017: tlsconnect: called from tlsclientrd Jul 13 17:23:43 2017: radtlsget: connection lost Jul 13 17:23:43 2017: tlsconnect: called from tlsclientrd Jul 13 17:23:43 2017: radtlsget: connection lost Jul 13 17:23:43 2017: tlsconnect: called from tlsclientrd Jul 13 17:23:43 2017: connecttoserver: connect failed Jul 13 17:23:43 2017: connecttcphostlist: failed Jul 13 17:23:43 2017: tlsconnect: sleeping 30s Jul 13 17:23:45 2017: connecttcphostlist: trying to open TCP connection to 200.131.219.102 port 2083 Jul 13 17:23:45 2017: connecttoserver: connect failed Jul 13 17:23:45 2017: connecttcphostlist: failed Jul 13 17:23:45 2017: tlsconnect: sleeping 32s Jul 13 17:23:45 2017: connecttcphostlist: trying to open TCP connection to 200.130.15.22 port 2083 Jul 13 17:23:45 2017: connecttoserver: connect failed Jul 13 17:23:45 2017: connecttcphostlist: failed Jul 13 17:23:45 2017: tlsconnect: sleeping 32s Jul 13 17:23:45 2017: connecttcphostlist: trying to open TCP connection to eduroam.unipampa.edu.br port 2083 Jul 13 17:23:45 2017: connecttoserver: connect failed Jul 13 17:23:45 2017: connecttcphostlist: failed Jul 13 17:23:45 2017: tlsconnect: sleeping 31s Jul 13 17:23:46 2017: radtlsget: connection lost Jul 13 17:23:46 2017: tlsserverrd: connection from 200.131.219.102 lost Jul 13 17:23:46 2017: tlsserverrd: waiting for writer to end Jul 13 17:23:46 2017: tlsserverwr: got signal Jul 13 17:23:46 2017: tlsserverwr: exiting as requested Jul 13 17:23:46 2017: tlsserverrd: reader for 200.131.219.102 exiting Jul 13 17:23:46 2017: freerq: called with refcount 1 Jul 13 17:23:47 2017: radtlsget: connection lost Jul 13 17:23:47 2017: tlsconnect: called from tlsclientrd Jul 13 17:23:49 2017: connecttcphostlist: trying to open TCP connection to homolog-idp.rnp.br port 2083 Jul 13 17:23:49 2017: connecttoserver: connect failed Jul 13 17:23:49 2017: connecttcphostlist: failed Jul 13 17:23:49 2017: tlsconnect: sleeping 34s