Has anyone come across this error? This happens when I start freeradius for the first time. Platform: RedHat ES 4.0 Version: FreeRadius 2.1.1 I have highlighted the message in read. It doesn't matter if I run this command as root. Thanks for you help. Sorry if this is posted twice. AM sudo ./radiusd -XXXX Fri Oct 3 14:34:04 2008 : Info: FreeRADIUS Version 2.1.1, for host i686-pc-linux-gnu, built on Oct 3 2008 at 14:30:11 Fri Oct 3 14:34:04 2008 : Info: Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. Fri Oct 3 14:34:04 2008 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Fri Oct 3 14:34:04 2008 : Info: PARTICULAR PURPOSE. Fri Oct 3 14:34:04 2008 : Info: You may redistribute copies of FreeRADIUS under the terms of the Fri Oct 3 14:34:04 2008 : Info: GNU General Public License v2. Fri Oct 3 14:34:04 2008 : Info: Starting - reading configuration files ... Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/radiusd.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/proxy.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/clients.conf Fri Oct 3 14:34:04 2008 : Debug: including files in directory /usr/local/freeradius-2.1.1/etc/raddb/modules/ Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/attr_filter Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/always Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/expiration Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/digest Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/echo Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/exec Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/detail.log Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/sradutmp Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/wimax Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/checkval Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/acct_unique Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/preprocess Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/linelog Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/mac2vlan Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/counter Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/etc_group Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/ippool Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/radutmp Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/pap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/krb5 Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/mac2ip Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/detail.example.com Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/ldap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/files Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/passwd Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/inner-eap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/mschap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/expr Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/detail Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/attr_rewrite Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/unix Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/smbpasswd Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/chap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/pam Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/realm Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/sql_log Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/policy Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/logintime Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/eap.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sql.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sql/mysql/dialup.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sql/mysql/counter.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/policy.conf Fri Oct 3 14:34:04 2008 : Debug: including files in directory /usr/local/freeradius-2.1.1/etc/raddb/sites-enabled/ Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sites-enabled/default Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sites-enabled/inner-tunnel Fri Oct 3 14:34:04 2008 : Debug: including dictionary file /usr/local/freeradius-2.1.1/etc/raddb/dictionary Fri Oct 3 14:34:05 2008 : Debug: main { Fri Oct 3 14:34:05 2008 : Debug: prefix = "/usr/local/freeradius-2.1.1" Fri Oct 3 14:34:05 2008 : Debug: localstatedir = "/usr/local/freeradius-2.1.1/var" Fri Oct 3 14:34:05 2008 : Debug: logdir = "/usr/local/freeradius-2.1.1/var/log/radius" Fri Oct 3 14:34:05 2008 : Debug: libdir = "/usr/local/freeradius-2.1.1/lib" Fri Oct 3 14:34:05 2008 : Debug: radacctdir = "/usr/local/freeradius-2.1.1/var/log/radius/radacct" Fri Oct 3 14:34:05 2008 : Debug: hostname_lookups = no Fri Oct 3 14:34:05 2008 : Debug: max_request_time = 30 Fri Oct 3 14:34:05 2008 : Debug: cleanup_delay = 5 Fri Oct 3 14:34:05 2008 : Debug: max_requests = 1024 Fri Oct 3 14:34:05 2008 : Debug: allow_core_dumps = no Fri Oct 3 14:34:05 2008 : Debug: pidfile = "/usr/local/freeradius-2.1.1/var/run/radiusd/radiusd.pid" Fri Oct 3 14:34:05 2008 : Debug: checkrad = "/usr/local/freeradius-2.1.1/sbin/checkrad" Fri Oct 3 14:34:05 2008 : Debug: debug_level = 0 Fri Oct 3 14:34:05 2008 : Debug: proxy_requests = yes Fri Oct 3 14:34:05 2008 : Debug: log { Fri Oct 3 14:34:05 2008 : Debug: stripped_names = no Fri Oct 3 14:34:05 2008 : Debug: auth = no Fri Oct 3 14:34:05 2008 : Debug: auth_badpass = no Fri Oct 3 14:34:05 2008 : Debug: auth_goodpass = no Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: security { Fri Oct 3 14:34:05 2008 : Debug: max_attributes = 200 Fri Oct 3 14:34:05 2008 : Debug: reject_delay = 1 Fri Oct 3 14:34:05 2008 : Debug: status_server = yes Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: client localhost { Fri Oct 3 14:34:05 2008 : Debug: ipaddr = 127.0.0.1 Fri Oct 3 14:34:05 2008 : Debug: require_message_authenticator = no Fri Oct 3 14:34:05 2008 : Debug: secret = "testing123" Fri Oct 3 14:34:05 2008 : Debug: nastype = "other" Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: radiusd: #### Loading Realms and Home Servers #### Fri Oct 3 14:34:05 2008 : Debug: proxy server { Fri Oct 3 14:34:05 2008 : Debug: retry_delay = 5 Fri Oct 3 14:34:05 2008 : Debug: retry_count = 3 Fri Oct 3 14:34:05 2008 : Debug: default_fallback = no Fri Oct 3 14:34:05 2008 : Debug: dead_time = 120 Fri Oct 3 14:34:05 2008 : Debug: wake_all_if_all_dead = no Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: home_server localhost { Fri Oct 3 14:34:05 2008 : Debug: ipaddr = 127.0.0.1 Fri Oct 3 14:34:05 2008 : Debug: port = 1812 Fri Oct 3 14:34:05 2008 : Debug: type = "auth" Fri Oct 3 14:34:05 2008 : Debug: secret = "testing123" Fri Oct 3 14:34:05 2008 : Debug: response_window = 20 Fri Oct 3 14:34:05 2008 : Debug: max_outstanding = 65536 Fri Oct 3 14:34:05 2008 : Debug: zombie_period = 40 Fri Oct 3 14:34:05 2008 : Debug: status_check = "status-server" Fri Oct 3 14:34:05 2008 : Debug: ping_interval = 30 Fri Oct 3 14:34:05 2008 : Debug: check_interval = 30 Fri Oct 3 14:34:05 2008 : Debug: num_answers_to_alive = 3 Fri Oct 3 14:34:05 2008 : Debug: num_pings_to_alive = 3 Fri Oct 3 14:34:05 2008 : Debug: revive_interval = 120 Fri Oct 3 14:34:05 2008 : Debug: status_check_timeout = 4 Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: home_server_pool my_auth_failover { Fri Oct 3 14:34:05 2008 : Debug: type = fail-over Fri Oct 3 14:34:05 2008 : Debug: home_server = localhost Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: realm example.com { Fri Oct 3 14:34:05 2008 : Debug: auth_pool = my_auth_failover Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: realm LOCAL { Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: radiusd: #### Instantiating modules #### Fri Oct 3 14:34:05 2008 : Debug: instantiate { Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_exec, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_exec Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating exec Fri Oct 3 14:34:05 2008 : Debug: exec { Fri Oct 3 14:34:05 2008 : Debug: wait = no Fri Oct 3 14:34:05 2008 : Debug: input_pairs = "request" Fri Oct 3 14:34:05 2008 : Debug: shell_escape = yes Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_expr, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_expr Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating expr Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_expiration, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_expiration Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating expiration Fri Oct 3 14:34:05 2008 : Debug: expiration { Fri Oct 3 14:34:05 2008 : Debug: reply-message = "Password Has Expired " Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_logintime, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_logintime Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating logintime Fri Oct 3 14:34:05 2008 : Debug: logintime { Fri Oct 3 14:34:05 2008 : Debug: reply-message = "You are calling outside your allowed timespan " Fri Oct 3 14:34:05 2008 : Debug: minimum-timeout = 60 Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: radiusd: #### Loading Virtual Servers #### Fri Oct 3 14:34:05 2008 : Debug: server inner-tunnel { Fri Oct 3 14:34:05 2008 : Debug: modules { Fri Oct 3 14:34:05 2008 : Debug: Module: Checking authenticate {...} for more modules to load Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_pap, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_pap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating pap Fri Oct 3 14:34:05 2008 : Debug: pap { Fri Oct 3 14:34:05 2008 : Debug: encryption_scheme = "auto" Fri Oct 3 14:34:05 2008 : Debug: auto_header = no Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_chap, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_chap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating chap Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_mschap, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_mschap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating mschap Fri Oct 3 14:34:05 2008 : Debug: mschap { Fri Oct 3 14:34:05 2008 : Debug: use_mppe = yes Fri Oct 3 14:34:05 2008 : Debug: require_encryption = no Fri Oct 3 14:34:05 2008 : Debug: require_strong = no Fri Oct 3 14:34:05 2008 : Debug: with_ntdomain_hack = no Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_unix, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_unix Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating unix Fri Oct 3 14:34:05 2008 : Debug: unix { Fri Oct 3 14:34:05 2008 : Debug: radwtmp = "/usr/local/freeradius-2.1.1/var/log/radius/radwtmp" Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_eap, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_eap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap Fri Oct 3 14:34:05 2008 : Debug: eap { Fri Oct 3 14:34:05 2008 : Debug: default_eap_type = "md5" Fri Oct 3 14:34:05 2008 : Debug: timer_expire = 60 Fri Oct 3 14:34:05 2008 : Debug: ignore_unknown_eap_types = no Fri Oct 3 14:34:05 2008 : Debug: cisco_accounting_username_bug = no Fri Oct 3 14:34:05 2008 : Debug: max_sessions = 2048 Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to sub-module rlm_eap_md5 Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap-md5 Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to sub-module rlm_eap_leap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap-leap Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to sub-module rlm_eap_gtc Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap-gtc Fri Oct 3 14:34:05 2008 : Debug: gtc { Fri Oct 3 14:34:05 2008 : Debug: challenge = "Password: " Fri Oct 3 14:34:05 2008 : Debug: auth_type = "PAP" Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to sub-module rlm_eap_tls Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap-tls Fri Oct 3 14:34:05 2008 : Debug: tls { Fri Oct 3 14:34:05 2008 : Debug: rsa_key_exchange = no Fri Oct 3 14:34:05 2008 : Debug: dh_key_exchange = yes Fri Oct 3 14:34:05 2008 : Debug: rsa_key_length = 512 Fri Oct 3 14:34:05 2008 : Debug: dh_key_length = 512 Fri Oct 3 14:34:05 2008 : Debug: verify_depth = 0 Fri Oct 3 14:34:05 2008 : Debug: pem_file_type = yes Fri Oct 3 14:34:05 2008 : Debug: private_key_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/server.pem" Fri Oct 3 14:34:05 2008 : Debug: certificate_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/server.pem" Fri Oct 3 14:34:05 2008 : Debug: CA_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/ca.pem" Fri Oct 3 14:34:05 2008 : Debug: private_key_password = "whatever" Fri Oct 3 14:34:05 2008 : Debug: dh_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/dh" Fri Oct 3 14:34:05 2008 : Debug: random_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/random" Fri Oct 3 14:34:05 2008 : Debug: fragment_size = 1024 Fri Oct 3 14:34:05 2008 : Debug: include_length = yes Fri Oct 3 14:34:05 2008 : Debug: check_crl = no Fri Oct 3 14:34:05 2008 : Debug: cipher_list = "DEFAULT" Fri Oct 3 14:34:05 2008 : Debug: make_cert_command = "/usr/local/freeradius-2.1.1/etc/raddb/certs/bootstrap" Fri Oct 3 14:34:05 2008 : Debug: cache { Fri Oct 3 14:34:05 2008 : Debug: enable = no Fri Oct 3 14:34:05 2008 : Debug: lifetime = 24 Fri Oct 3 14:34:05 2008 : Debug: max_entries = 255 Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: } Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time ..............................+....................+..............+....+....................................................................+.......................................................................... ...................................+..................................................................................+.......+.......................................................................+................. ..............+.....+..+.................+...............................+......+..................................................................................................................................+.. .........................................+.......+.....................................................+...............+............................................................................................. ..................+.........+.............+...................................+...+.......+......+.............+......................+.....................+......+.+.......................................... .............+.........................................+......................+..............+...........................+............................................................................................. ............................................................................................................................+.............................................................+............................... ...................................................................................................................................................................................................+....................... ............+...+.................................................................+ +........................+......................................................++*++*++* *unable to write 'random state' Generating a 2048 bit RSA private key* ....................................+++ ....................+++ *unable to write 'random state' writing new private key to 'server.key'* ----- Generating a 2048 bit RSA private key ..............+++ .*+++ unable to write 'random state' writing new private key to 'ca.key'* ----- Using configuration from ./server.cnf Check that the request matches the signature Signature ok Certificate Details: Serial Number: 1 (0x1) Validity Not Before: Oct 3 18:34:45 2008 GMT Not After : Oct 3 18:34:45 2009 GMT Subject: countryName = FR stateOrProvinceName = Radius organizationName = Example Inc. commonName = Example Server Certificate emailAddress = admin@example.com X509v3 extensions: X509v3 Extended Key Usage: TLS Web Server Authentication Certificate is to be certified until Oct 3 18:34:45 2009 GMT (365 days) *Write out database with 1 new entries Data Base Updated unable to write 'random state' unable to write 'random state'* MAC verified OK Fri Oct 3 14:34:45 2008 : Debug: Exec-Program output: openssl dhparam -out dh 1024 openssl req -new -out server.csr -keyout server.key -config ./server.cnf openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out server.crt -extensions xpserver_ext -extfile xpextensions -config ./server.cnf openssl pkcs12 -export -in server.crt -inkey server.key -out server.p12 -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` openssl pkcs12 -in server.p12 -out server.pem -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` openssl x509 -inform PEM -outform DER -in ca.pem -out ca.der Fri Oct 3 14:34:45 2008 : Debug: Exec-Program-Wait: plaintext: openssl dhparam -out dh 1024 openssl req -new -out server.csr -keyout server.key -config ./server.cnf openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out server.crt -extensions xpserver_ext -extfile xpextensions -config ./server.cnf openssl pkcs12 -export -in server.crt -inkey server.key -out server.p12 -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` openssl pkcs12 -in server.p12 -out server.pem -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` openssl x509 -inform PEM -outform DER -in ca.pem -out ca.der Fri Oct 3 14:34:45 2008 : Debug: Exec-Program: returned: 0 Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to sub-module rlm_eap_ttls Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating eap-ttls Fri Oct 3 14:34:45 2008 : Debug: ttls { Fri Oct 3 14:34:45 2008 : Debug: default_eap_type = "md5" Fri Oct 3 14:34:45 2008 : Debug: copy_request_to_tunnel = no Fri Oct 3 14:34:45 2008 : Debug: use_tunneled_reply = no Fri Oct 3 14:34:45 2008 : Debug: virtual_server = "inner-tunnel" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to sub-module rlm_eap_peap Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating eap-peap Fri Oct 3 14:34:45 2008 : Debug: peap { Fri Oct 3 14:34:45 2008 : Debug: default_eap_type = "mschapv2" Fri Oct 3 14:34:45 2008 : Debug: copy_request_to_tunnel = no Fri Oct 3 14:34:45 2008 : Debug: use_tunneled_reply = no Fri Oct 3 14:34:45 2008 : Debug: proxy_tunneled_request_as_eap = yes Fri Oct 3 14:34:45 2008 : Debug: virtual_server = "inner-tunnel" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to sub-module rlm_eap_mschapv2 Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating eap-mschapv2 Fri Oct 3 14:34:45 2008 : Debug: mschapv2 { Fri Oct 3 14:34:45 2008 : Debug: with_ntdomain_hack = no Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking authorize {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_realm, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_realm Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating suffix Fri Oct 3 14:34:45 2008 : Debug: realm suffix { Fri Oct 3 14:34:45 2008 : Debug: format = "suffix" Fri Oct 3 14:34:45 2008 : Debug: delimiter = "@" Fri Oct 3 14:34:45 2008 : Debug: ignore_default = no Fri Oct 3 14:34:45 2008 : Debug: ignore_null = no Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_files, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_files Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating files Fri Oct 3 14:34:45 2008 : Debug: files { Fri Oct 3 14:34:45 2008 : Debug: usersfile = "/usr/local/freeradius-2.1.1/etc/raddb/users" Fri Oct 3 14:34:45 2008 : Debug: acctusersfile = "/usr/local/freeradius-2.1.1/etc/raddb/acct_users" Fri Oct 3 14:34:45 2008 : Debug: preproxy_usersfile = "/usr/local/freeradius-2.1.1/etc/raddb/preproxy_users" Fri Oct 3 14:34:45 2008 : Debug: compat = "no" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking session {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_radutmp, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_radutmp Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating radutmp Fri Oct 3 14:34:45 2008 : Debug: radutmp { Fri Oct 3 14:34:45 2008 : Debug: filename = "/usr/local/freeradius-2.1.1/var/log/radius/radutmp" Fri Oct 3 14:34:45 2008 : Debug: username = "%{User-Name}" Fri Oct 3 14:34:45 2008 : Debug: case_sensitive = yes Fri Oct 3 14:34:45 2008 : Debug: check_with_nas = yes Fri Oct 3 14:34:45 2008 : Debug: perm = 384 Fri Oct 3 14:34:45 2008 : Debug: callerid = yes Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking post-proxy {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: Module: Checking post-auth {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_attr_filter Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating attr_filter.access_reject Fri Oct 3 14:34:45 2008 : Debug: attr_filter attr_filter.access_reject { Fri Oct 3 14:34:45 2008 : Debug: attrsfile = "/usr/local/freeradius-2.1.1/etc/raddb/attrs.access_reject" Fri Oct 3 14:34:45 2008 : Debug: key = "%{User-Name}" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: modules { Fri Oct 3 14:34:45 2008 : Debug: Module: Checking authenticate {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: Module: Checking authorize {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_preprocess, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_preprocess Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating preprocess Fri Oct 3 14:34:45 2008 : Debug: preprocess { Fri Oct 3 14:34:45 2008 : Debug: huntgroups = "/usr/local/freeradius-2.1.1/etc/raddb/huntgroups" Fri Oct 3 14:34:45 2008 : Debug: hints = "/usr/local/freeradius-2.1.1/etc/raddb/hints" Fri Oct 3 14:34:45 2008 : Debug: with_ascend_hack = no Fri Oct 3 14:34:45 2008 : Debug: ascend_channels_per_line = 23 Fri Oct 3 14:34:45 2008 : Debug: with_ntdomain_hack = no Fri Oct 3 14:34:45 2008 : Debug: with_specialix_jetstream_hack = no Fri Oct 3 14:34:45 2008 : Debug: with_cisco_vsa_hack = no Fri Oct 3 14:34:45 2008 : Debug: with_alvarion_vsa_hack = no Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking preacct {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_acct_unique, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_acct_unique Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating acct_unique Fri Oct 3 14:34:45 2008 : Debug: acct_unique { Fri Oct 3 14:34:45 2008 : Debug: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking accounting {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_detail, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_detail Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating detail Fri Oct 3 14:34:45 2008 : Debug: detail { Fri Oct 3 14:34:45 2008 : Debug: detailfile = "/usr/local/freeradius-2.1.1/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" Fri Oct 3 14:34:45 2008 : Debug: header = "%t" Fri Oct 3 14:34:45 2008 : Debug: detailperm = 384 Fri Oct 3 14:34:45 2008 : Debug: dirperm = 493 Fri Oct 3 14:34:45 2008 : Debug: locking = no Fri Oct 3 14:34:45 2008 : Debug: log_packet_header = no Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating attr_filter.accounting_response Fri Oct 3 14:34:45 2008 : Debug: attr_filter attr_filter.accounting_response { Fri Oct 3 14:34:45 2008 : Debug: attrsfile = "/usr/local/freeradius-2.1.1/etc/raddb/attrs.accounting_response" Fri Oct 3 14:34:45 2008 : Debug: key = "%{User-Name}" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking session {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: Module: Checking post-proxy {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: Module: Checking post-auth {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: radiusd: #### Opening IP addresses and Ports #### Fri Oct 3 14:34:45 2008 : Debug: listen { Fri Oct 3 14:34:45 2008 : Debug: type = "auth" Fri Oct 3 14:34:45 2008 : Debug: ipaddr = * Fri Oct 3 14:34:45 2008 : Debug: port = 0 Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: listen { Fri Oct 3 14:34:45 2008 : Debug: type = "acct" Fri Oct 3 14:34:45 2008 : Debug: ipaddr = * Fri Oct 3 14:34:45 2008 : Debug: port = 0 Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Listening on authentication address * port 1812 Fri Oct 3 14:34:45 2008 : Debug: Listening on accounting address * port 1813 Fri Oct 3 14:34:45 2008 : Debug: Listening on proxy address * port 1814 Fri Oct 3 14:34:45 2008 : Debug: Ready to process requests.