FreeRADIUS Version 3.0.12 Copyright (C) 1999-2016 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... /etc/freeradius/proxy.conf[35]: Ignoring duplicate configuration item 'ipaddr' Ignoring old-style configuration entry "secret" in realm "~(.*\.)*ufjfteste\.br$" Debugger not attached Creating attribute LDAP-Group Creating attribute Unix-Group rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output rlm_mschap (mschap): using internal authentication [/etc/freeradius/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay" found in filter list for realm "DEFAULT". [/etc/freeradius/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay-USec" found in filter list for realm "DEFAULT". rlm_ldap: libldap vendor: OpenLDAP, version: 20442 rlm_ldap (ldap): Initialising connection pool rlm_ldap (ldap): Opening additional connection (0), 1 of 32 pending slots used rlm_ldap (ldap): Connecting to ldap://localhost:389 rlm_ldap (ldap): Bind successful rlm_ldap (ldap): Opening additional connection (1), 1 of 31 pending slots used rlm_ldap (ldap): Connecting to ldap://localhost:389 rlm_ldap (ldap): Bind successful rlm_ldap (ldap): Opening additional connection (2), 1 of 30 pending slots used rlm_ldap (ldap): Connecting to ldap://localhost:389 rlm_ldap (ldap): Bind successful rlm_ldap (ldap): Opening additional connection (3), 1 of 29 pending slots used rlm_ldap (ldap): Connecting to ldap://localhost:389 rlm_ldap (ldap): Bind successful rlm_ldap (ldap): Opening additional connection (4), 1 of 28 pending slots used rlm_ldap (ldap): Connecting to ldap://localhost:389 rlm_ldap (ldap): Bind successful rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked tls: Using cached TLS configuration from previous invocation tls: Using cached TLS configuration from previous invocation Ignoring "sql" (see raddb/mods-available/README.rst) radiusd: #### Opening IP addresses and Ports #### Listening on auth proto tcp address * port 2083 (TLS) bound to server default Listening on auth proto tcp address :: port 2083 (TLS) Listening on auth address 127.0.0.1 port 4000 Listening on auth address * port 18120 bound to server inner-tunnel Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Listening on proxy address * port 35952 Listening on proxy address :: port 32926 Ready to process requests Listening on auth from client (200.130.15.23, 33001) -> (*, 2083, virtual-server=default) Waking up in 0.1 seconds. Waking up in 0.1 seconds. Waking up in 29.4 seconds. Waking up in 0.3 seconds. (0) Received Access-Request Id 0 from 127.0.0.1:49487 to 127.0.0.1:1812 length 152 (0) User-Name = "eduroam@rnpteste.br" (0) NAS-IP-Address = 127.0.0.1 (0) Calling-Station-Id = "02-00-00-00-00-01" (0) Framed-MTU = 1400 (0) NAS-Port-Type = Wireless-802.11 (0) Service-Type = Framed-User (0) Connect-Info = "CONNECT 11Mbps 802.11b" (0) EAP-Message = 0x0200001801656475726f616d40726e7074657374652e6272 (0) Message-Authenticator = 0x425dab3569ba0abc75b3ed0250beb9bd (0) # Executing section authorize from file /etc/freeradius/sites-enabled/default rlm_ldap (ldap): Reserved connection (0) (0) ldap: Performing search in "dc=eduroam,dc=across" with filter "(uid=eduroam@rnpteste.br)", scope "sub" (0) ldap: Waiting for search result... (0) ldap: Search returned no results rlm_ldap (ldap): Released connection (0) rlm_ldap (ldap): Need 5 more connections to reach 10 spares rlm_ldap (ldap): Opening additional connection (5), 1 of 27 pending slots used rlm_ldap (ldap): Connecting to ldap://localhost:389 rlm_ldap (ldap): Bind successful Trying SSL to port 2083 (0) Sent Access-Request Id 50 from 200.131.219.102:53625 to 200.130.15.23:2083 length 161 Listening on proxy (200.131.219.102, 53625) -> home_server (200.130.15.23, 2083) (0) User-Name = "eduroam@rnpteste.br" Waking up in 0.2 seconds. (0) NAS-IP-Address = 127.0.0.1 (0) Calling-Station-Id = "02-00-00-00-00-01" (0) Framed-MTU = 1400 (0) NAS-Port-Type = Wireless-802.11 (0) Service-Type = Framed-User (0) Connect-Info = "CONNECT 11Mbps 802.11b" (0) EAP-Message = 0x0200001801656475726f616d40726e7074657374652e6272 (0) Message-Authenticator = 0x425dab3569ba0abc75b3ed0250beb9bd (0) Event-Timestamp = "Jul 13 2017 17:23:36 BRT" (0) Proxy-State = 0x30 (0) Marking home server 200.130.15.23 port 2083 alive Waking up in 0.3 seconds. (0) Received Access-Challenge Id 50 from 200.130.15.23:2083 to 200.131.219.102:53625 length 83 (0) EAP-Message = 0x010100160410104ff67bbf7ef4852235f519ee2b3e17 (0) Message-Authenticator = 0x3ef1382a40d8a8d53a382574129aca6b (0) State = 0x161759b416165db0f3b4952e04b41a4d (0) Proxy-State = 0x30 (0) # Executing section post-proxy from file /etc/freeradius/sites-enabled/default (0) # Executing group from file /etc/freeradius/sites-enabled/default (0) Sent Access-Challenge Id 0 from 127.0.0.1:1812 to 127.0.0.1:49487 length 0 (0) EAP-Message = 0x010100160410104ff67bbf7ef4852235f519ee2b3e17 (0) Message-Authenticator = 0x3ef1382a40d8a8d53a382574129aca6b (0) State = 0x161759b416165db0f3b4952e04b41a4d Waking up in 0.3 seconds. (1) Received Access-Request Id 1 from 127.0.0.1:49487 to 127.0.0.1:1812 length 152 (1) User-Name = "eduroam@rnpteste.br" (1) NAS-IP-Address = 127.0.0.1 (1) Calling-Station-Id = "02-00-00-00-00-01" (1) Framed-MTU = 1400 (1) NAS-Port-Type = Wireless-802.11 (1) Service-Type = Framed-User (1) Connect-Info = "CONNECT 11Mbps 802.11b" (1) EAP-Message = 0x020100060315 (1) State = 0x161759b416165db0f3b4952e04b41a4d (1) Message-Authenticator = 0xf8039e5b4c04b57df13e32ca8b33427c (1) # Executing section authorize from file /etc/freeradius/sites-enabled/default rlm_ldap (ldap): Reserved connection (1) (1) ldap: Performing search in "dc=eduroam,dc=across" with filter "(uid=eduroam@rnpteste.br)", scope "sub" (1) ldap: Waiting for search result... (1) ldap: Search returned no results rlm_ldap (ldap): Released connection (1) (1) Sent Access-Request Id 140 from 200.131.219.102:53625 to 200.130.15.23:2083 length 161 (1) User-Name = "eduroam@rnpteste.br" (1) NAS-IP-Address = 127.0.0.1 (1) Calling-Station-Id = "02-00-00-00-00-01" (1) Framed-MTU = 1400 (1) NAS-Port-Type = Wireless-802.11 (1) Service-Type = Framed-User (1) Connect-Info = "CONNECT 11Mbps 802.11b" (1) EAP-Message = 0x020100060315 (1) State = 0x161759b416165db0f3b4952e04b41a4d (1) Message-Authenticator = 0xf8039e5b4c04b57df13e32ca8b33427c (1) Event-Timestamp = "Jul 13 2017 17:23:36 BRT" (1) Proxy-State = 0x31 Waking up in 0.3 seconds. (1) Received Access-Challenge Id 140 from 200.130.15.23:2083 to 200.131.219.102:53625 length 67 (1) EAP-Message = 0x010200061520 (1) Message-Authenticator = 0x86c5fd310377237b9e6bff86b0a425f1 (1) State = 0x161759b417154cb0f3b4952e04b41a4d (1) Proxy-State = 0x31 (1) # Executing section post-proxy from file /etc/freeradius/sites-enabled/default (1) # Executing group from file /etc/freeradius/sites-enabled/default (1) Sent Access-Challenge Id 1 from 127.0.0.1:1812 to 127.0.0.1:49487 length 0 (1) EAP-Message = 0x010200061520 (1) Message-Authenticator = 0x86c5fd310377237b9e6bff86b0a425f1 (1) State = 0x161759b417154cb0f3b4952e04b41a4d Waking up in 0.3 seconds. (2) Received Access-Request Id 2 from 127.0.0.1:49487 to 127.0.0.1:1812 length 455 (2) User-Name = "eduroam@rnpteste.br" (2) NAS-IP-Address = 127.0.0.1 (2) Calling-Station-Id = "02-00-00-00-00-01" (2) Framed-MTU = 1400 (2) NAS-Port-Type = Wireless-802.11 (2) Service-Type = Framed-User (2) Connect-Info = "CONNECT 11Mbps 802.11b" (2) EAP-Message = 0x0202013315001603010128010001240303d2f5eea4fdbe3d97827f69579ce66256228d2985dafcc71333fe57a0d62fe0610000aac030c02cc028c024c014c00a00a500a300a1009f006b006a0069006800390038003700360088008700860085c032c02ec02ac026c00fc005009d003d00350084c02fc0 (2) State = 0x161759b417154cb0f3b4952e04b41a4d (2) Message-Authenticator = 0x67ecbe0e885a25686f87da3397222a19 (2) # Executing section authorize from file /etc/freeradius/sites-enabled/default rlm_ldap (ldap): Reserved connection (2) (2) ldap: Performing search in "dc=eduroam,dc=across" with filter "(uid=eduroam@rnpteste.br)", scope "sub" (2) ldap: Waiting for search result... (2) ldap: Search returned no results rlm_ldap (ldap): Released connection (2) rlm_ldap (ldap): Need 4 more connections to reach 10 spares rlm_ldap (ldap): Opening additional connection (6), 1 of 26 pending slots used rlm_ldap (ldap): Connecting to ldap://localhost:389 rlm_ldap (ldap): Bind successful (2) Sent Access-Request Id 27 from 200.131.219.102:53625 to 200.130.15.23:2083 length 464 (2) User-Name = "eduroam@rnpteste.br" (2) NAS-IP-Address = 127.0.0.1 (2) Calling-Station-Id = "02-00-00-00-00-01" (2) Framed-MTU = 1400 (2) NAS-Port-Type = Wireless-802.11 (2) Service-Type = Framed-User (2) Connect-Info = "CONNECT 11Mbps 802.11b" (2) EAP-Message = 0x0202013315001603010128010001240303d2f5eea4fdbe3d97827f69579ce66256228d2985dafcc71333fe57a0d62fe0610000aac030c02cc028c024c014c00a00a500a300a1009f006b006a0069006800390038003700360088008700860085c032c02ec02ac026c00fc005009d003d00350084c02fc0 (2) State = 0x161759b417154cb0f3b4952e04b41a4d (2) Message-Authenticator = 0x67ecbe0e885a25686f87da3397222a19 (2) Event-Timestamp = "Jul 13 2017 17:23:37 BRT" (2) Proxy-State = 0x32 Received packet will be too large! Set "fragment_size = 1071" Closing TLS socket to home server Client has closed connection (2) Waiting for client retransmission in order to do a proxy retransmit Waking up in 0.1 seconds. Waking up in 4.6 seconds. Trying SSL to port 2083 Listening on proxy (200.131.219.102, 57052) -> home_server (200.130.15.23, 2083) (2) Sent Access-Request Id 1 from 200.131.219.102:57052 to 200.130.15.23:2083 length 464 (2) User-Name = "eduroam@rnpteste.br" (2) NAS-IP-Address = 127.0.0.1 (2) Calling-Station-Id = "02-00-00-00-00-01" (2) Framed-MTU = 1400 (2) NAS-Port-Type = Wireless-802.11 (2) Service-Type = Framed-User (2) Connect-Info = "CONNECT 11Mbps 802.11b" (2) EAP-Message = 0x0202013315001603010128010001240303d2f5eea4fdbe3d97827f69579ce66256228d2985dafcc71333fe57a0d62fe0610000aac030c02cc028c024c014c00a00a500a300a1009f006b006a0069006800390038003700360088008700860085c032c02ec02ac026c00fc005009d003d00350084c02fc0 (2) State = 0x161759b417154cb0f3b4952e04b41a4d (2) Message-Authenticator = 0x67ecbe0e885a25686f87da3397222a19 (2) Event-Timestamp = "Jul 13 2017 17:23:37 BRT" (2) Proxy-State = 0x32 Waking up in 1.8 seconds. Waking up in 0.3 seconds. (2) Received Access-Reject Id 1 from 200.130.15.23:2083 to 200.131.219.102:57052 length 23 (2) Proxy-State = 0x32 (2) # Executing section post-proxy from file /etc/freeradius/sites-enabled/default (2) # Executing group from file /etc/freeradius/sites-enabled/default rlm_eap (EAP): No EAP session matching state 0x161759b417154cb0 (2) eap: Either EAP-request timed out OR EAP-response to an unknown EAP-request Waking up in 0.5 seconds. Waking up in 0.1 seconds. (2) Sent Access-Reject Id 2 from 127.0.0.1:1812 to 127.0.0.1:49487 length 20 Waking up in 1.3 seconds. Reached idle timeout on socket auth from client (200.130.15.23, 33001) -> (*, 2083, virtual-server=default) ... shutting down socket auth from client (200.130.15.23, 33001) -> (*, 2083, virtual-server=default) Waking up in 2.6 seconds.