> No. > You have to look at the rest of the debug output to see what’s going on.
> The update blocks don’t return any code. They just pass through the code which was there before the update block was run.
Okay, that makes sense.
Quick overview of what I think/see is happening. I'm sure it's wrong so please correct me.
Packet 8 comes in. Post-Proxy is run and the update to outer.session-state happens. Access-Challenge is sent and the state is cached. Packet 9 comes in. It's an Access-Request packet which triggers the previously cached information to be retrieved. This packet only gets to the authenticate section before a new Access-Challenge is sent causing the current state to be cached.
Packet 10 comes in. It's an Access-Request which retrieves the previous state information. Post-Auth in sites-enabled/default is ran which executes update for &reply: += &session-state:. This results in a No attributes updated because the previous state didn't have any.
(8) Received Access-Request Id 70 from 172.23.242.165:1645 to 192.168.244.230:1812 length 324 (8) User-Name = 'anon1337' (8) Service-Type = Framed-User (8) Framed-IP-Address = 192.168.243.38 (8) Framed-MTU = 1500 (8) Called-Station-Id = '00-00-00-00-AA-AA' (8) Calling-Station-Id = '00-00-00-00-BB-BB' (8) EAP-Message = 0x02850090190017030100202521e17eceb019efb0902fa8d72d8a2ab02ee389663711a72de20381703010060063a3571bfc98199485cf8b5551527d58e1b7a9a751e7038a60a127be872aeae13bd67e7a165c1c52406b3ee64c85566d8e621cbfb38969e243d9e34bae87fb1f5b (8) Message-Authenticator = 0xe39116b3135152d0ee52e3258 (8) NAS-Port-Type = Ethernet (8) NAS-Port = 50002 (8) NAS-Port-Id = 'FastEthernet0/2' (8) Called-Station-Id = '00-00-00-00-AA-AA' (8) State = 0x0fd7c6d30852dfc3c063e5767e205a4d (8) NAS-IP-Address = 172.23.242.165 (8) session-state: No cached attributes (8) # Executing section authorize from file /etc/raddb/sites-enabled/default (8) authorize { (8) ntdomain: Checking for prefix before "\" (8) ntdomain: No '\' in User-Name = "anon1337", looking up realm NULL (8) ntdomain: No such realm "NULL" (8) [ntdomain] = noop (8) suffix: Checking for suffix after "@" (8) suffix: No '@' in User-Name = "anon1337", looking up realm NULL (8) suffix: No such realm "NULL" (8) [suffix] = noop (8) eap: Peer sent code Response (2) ID 133 length 144 (8) eap: Continuing tunnel setup (8) [eap] = ok (8) } # authorize = ok (8) Found Auth-Type = EAP (8) # Executing group from file /etc/raddb/sites-enabled/default (8) authenticate { (8) eap: Expiring EAP session with state 0xd3877aa8d3026065 (8) eap: Finished EAP session with state 0x0fd7c6d30852dfc3 (8) eap: Previous EAP request found for state 0x0fd7c6d30852dfc3, released from the list (8) eap: Peer sent method PEAP (25) (8) eap: EAP PEAP (25) (8) eap: Calling eap_peap to process EAP data (8) eap_peap: processing EAP-TLS (8) eap_peap: eaptls_verify returned 7 (8) eap_peap: Done initial handshake (8) eap_peap: eaptls_process returned 7 (8) eap_peap: FR_TLS_OK (8) eap_peap: Session established. Decoding tunneled attributes (8) eap_peap: PEAP state phase2 (8) eap_peap: EAP type MSCHAPv2 (26) (8) eap_peap: Got tunneled request (8) eap_peap: EAP-Message = 0x028500481a02850043312e31704e23166e02ecec68b8b34d2e400000000000000000ed732d4aae8a94fa2b2afbfdd05b5c78e9dc7b3b9dbb99b400676c6f6 (8) eap_peap: Setting User-Name to mydomain\user000 (8) eap_peap: Sending tunneled request to inner-tunnel (8) eap_peap: EAP-Message = 0x028500481a02850043312e31704e23166e02ecec68b8b34d2e400000000000000000ed732d4aae8a94fa2b2afbfdd05b5c78e9dc7b3b9dbb99b400676c6f6 (8) eap_peap: FreeRADIUS-Proxied-To = 127.0.0.1 (8) eap_peap: User-Name = 'mydomain\user000' (8) eap_peap: State = 0xd3877aa8d30260658703aed2f073d630 (8) eap_peap: Service-Type = Framed-User (8) eap_peap: Framed-IP-Address = 192.168.243.38 (8) eap_peap: Framed-MTU = 1500 (8) eap_peap: Called-Station-Id = '00-00-00-00-AA-AA' (8) eap_peap: Called-Station-Id = '00-00-00-00-AA-AA' (8) eap_peap: Calling-Station-Id = '00-00-00-00-BB-BB' (8) eap_peap: NAS-Port-Type = Ethernet (8) eap_peap: NAS-Port = 50002 (8) eap_peap: NAS-Port-Id = 'FastEthernet0/2' (8) eap_peap: NAS-IP-Address = 172.23.242.165 (8) eap_peap: Event-Timestamp = 'Dec 12 2014 11:27:58 EST' (8) Virtual server received request (8) EAP-Message = 0x028500481a02850043312e31704e23166e02ecec68b8b34d2e400000000000000000ed732d4aae8a94fa2b2afbfdd05b5c78e9dc7b3b9dbb99b400 (8) FreeRADIUS-Proxied-To = 127.0.0.1 (8) User-Name = 'mydomain\user000' (8) State = 0xd3877aa8d30260658703aed2f073d630 (8) Service-Type = Framed-User (8) Framed-IP-Address = 192.168.243.38 (8) Framed-MTU = 1500 (8) Called-Station-Id = '00-00-00-00-AA-AA' (8) Called-Station-Id = '00-00-00-00-AA-AA' (8) Calling-Station-Id = '00-00-00-00-BB-BB' (8) NAS-Port-Type = Ethernet (8) NAS-Port = 50002 (8) NAS-Port-Id = 'FastEthernet0/2' (8) NAS-IP-Address = 172.23.242.165 (8) Event-Timestamp = 'Dec 12 2014 11:27:58 EST' (8) server inner-tunnel { (8) session-state: No cached attributes (8) # Executing section authorize from file /etc/raddb/sites-enabled/inner-tunnel (8) authorize { (8) ntdomain: Checking for prefix before "\" (8) ntdomain: Looking up realm "mydomain" for User-Name = "mydomain\user000" (8) ntdomain: Found realm "mydomain" (8) ntdomain: Adding Realm = "mydomain" (8) ntdomain: Proxying request from user mydomain\user000 to realm mydomain (8) ntdomain: Preparing to proxy authentication request to realm "mydomain" (8) [ntdomain] = updated (8) suffix: Request already has destination realm set. Ignoring (8) [suffix] = noop (8) eap: Request is supposed to be proxied to Realm mydomain. Not doing EAP. (8) [eap] = noop (8) [expiration] = noop (8) [logintime] = noop (8) [pap] = noop (8) } # authorize = updated (8) } # server inner-tunnel (8) Virtual server sending reply (8) eap_peap: Got tunneled reply code 0 (8) eap_peap: Calling authenticate in order to initiate tunneled EAP session (8) # Executing group from file /etc/raddb/sites-enabled/inner-tunnel (8) authenticate { (8) eap: Expiring EAP session with state 0xd3877aa8d3026065 (8) eap: Finished EAP session with state 0xd3877aa8d3026065 (8) eap: Previous EAP request found for state 0xd3877aa8d3026065, released from the list (8) eap: Peer sent method MSCHAPv2 (26) (8) eap: EAP MSCHAPv2 (26) (8) eap: Calling eap_mschapv2 to process EAP data (8) eap_mschapv2: cancelling authentication and letting it be proxied (8) eap: No EAP proxy set. Not composing EAP (8) [eap] = handled (8) } # authenticate = handled (8) eap_peap: Tunnelled authentication will be proxied to mydomain (8) eap_peap: Remembering to do EAP-MS-CHAP-V2 post-proxy (8) eap: Tunneled session will be proxied. Not doing EAP (8) [eap] = handled (8) } # authenticate = handled Opening new proxy socket 'proxy address * port 0' Listening on proxy address * port 57020 (8) Proxying request to home server 192.168.1.103 port 1812 timeout 30.000000 (8) Sent Access-Request Id 247 from 0.0.0.0:57020 to 192.168.1.103:1812 length 255 (8) User-Name = 'mydomain\user000' (8) Service-Type = Framed-User (8) Framed-IP-Address = 192.168.243.38 (8) Framed-MTU = 1500 (8) Called-Station-Id = '00-00-00-00-AA-AA' (8) Called-Station-Id = '00-00-00-00-AA-AA' (8) Calling-Station-Id = '00-00-00-00-BB-BB' (8) NAS-Port-Type = Ethernet (8) NAS-Port = 50002 (8) NAS-Port-Id = 'FastEthernet0/2' (8) NAS-IP-Address = 172.23.242.165 (8) Event-Timestamp = 'Dec 12 2014 11:27:58 EST' (8) MS-CHAP-Challenge = 0xc3ecc897daed3f010d860fe7ae1331c3 (8) MS-CHAP2-Response = 0x856c2e31704e23166e02ecec68b8b34d2e400000000000000000ed732d4aae8a94fa2b2afbfdd05b5c78e9dc7b3b9dbb99b4 (8) Message-Authenticator := 0x00 (8) Proxy-State = 0x3730 (8) Received Access-Accept Id 247 from 192.168.1.103:1812 to 192.168.244.230:57020 length 256 (8) Proxy-State = 0x3730 (8) Framed-Protocol = PPP (8) Service-Type = Framed-User (8) Class = 0x3e5d044100000137000102000a02016700000000000000000000000001d006be3dc74c5b0000000000054507 (8) MS-MPPE-Recv-Key = 0x6f6da555aa52c08a69f1d40ab379f27d (8) MS-MPPE-Send-Key = 0xd848d864c43408713a143c15f3c9344c (8) MS-CHAP2-Success = 0x85533d43323141433136344334303733393138383343353235354643414645363330314630384133343839 (8) MS-CHAP-Domain = '\205MYDOMAIN' (8) MS-Link-Utilization-Threshold = 50 (8) MS-Link-Drop-Time-Limit = 120 (8) # Executing section post-proxy from file /etc/raddb/sites-enabled/default (8) post-proxy { (8) eap: Doing post-proxy callback (8) eap: Passing reply from proxy back into the tunnel server inner-tunnel { (8) eap: Passing reply back for EAP-MS-CHAP-V2 (8) # Executing section post-proxy from file /etc/raddb/sites-enabled/inner-tunnel (8) post-proxy { (8) update { (8) &outer.session-state:Proxy-State += &reply:Proxy-State -> 0x3730 (8) &outer.session-state:Framed-Protocol += &reply:Framed-Protocol -> PPP (8) &outer.session-state:Service-Type += &reply:Service-Type -> Framed-User (8) &outer.session-state:Class += &reply:Class -> 0x3e5d044100000137000102000a02016700000000000000000000000001d006be3dc (8) &outer.session-state:MS-MPPE-Recv-Key += &reply:MS-MPPE-Recv-Key -> 0x6f6da555aa52c08a69 (8) &outer.session-state:MS-MPPE-Send-Key += &reply:MS-MPPE-Send-Key -> 0xd848d864c4340871 (8) &outer.session-state:MS-CHAP2-Success += &reply:MS-CHAP2-Success -> 0x85533d433231414331363443343037333931383833433532353546434146453 (8) &outer.session-state:MS-CHAP-Domain += &reply:MS-CHAP-Domain -> '\205MYDOMAIN' (8) &outer.session-state:MS-Link-Utilization-Threshold += &reply:MS-Link-Utilization-Threshold -> 50 (8) &outer.session-state:MS-Link-Drop-Time-Limit += &reply:MS-Link-Drop-Time-Limit -> 120 (8) } # update = noop (8) eap: Doing post-proxy callback (8) eap: Passing reply from proxy back into the tunnel 2. (8) eap: Proxied authentication succeeded MSCHAP Success (8) eap: EAP session adding &reply:State = 0xd3877aa8d2016065 (8) [eap] = ok (8) } # post-proxy = ok } # server inner-tunnel (8) eap: Final reply from tunneled session code 11 (8) eap: Proxy-State = 0x3730 (8) eap: Framed-Protocol = PPP (8) eap: Service-Type = Framed-User (8) eap: Class = 0x3e5d044100000137000102000a02016700000000000000000000000001d006be3dc74c5b (8) eap: MS-CHAP-Domain = '\205MYDOMAIN' (8) eap: MS-Link-Utilization-Threshold = 50 (8) eap: MS-Link-Drop-Time-Limit = 120 (8) eap: EAP-Message = 0x018600331a0385002e533d4332314143313634433430373339313838334335323535464341464536333 (8) eap: Message-Authenticator = 0x00000000000000000000000000000000 (8) eap: State = 0xd3877aa8d20160658703aed2f073d630 (8) eap: Got reply 11 (8) eap: Got tunneled reply RADIUS code 11 (8) eap: Proxy-State = 0x3730 (8) eap: Framed-Protocol = PPP (8) eap: Service-Type = Framed-User (8) eap: Class = 0x3e5d044100000137000102000a02016700000000000000000000000001d006be3dc74c5b (8) eap: MS-CHAP-Domain = '\205MYDOMAIN' (8) eap: MS-Link-Utilization-Threshold = 50 (8) eap: MS-Link-Drop-Time-Limit = 120 (8) eap: EAP-Message = 0x018600331a0385002e533d4332314143313634433430373339313838334335323535464341464536 (8) eap: Message-Authenticator = 0x00000000000000000000000000000000 (8) eap: State = 0xd3877aa8d20160658703aed2f073d630 (8) eap: Got tunneled Access-Challenge (8) eap: Reply was handled (8) eap: EAP session adding &reply:State = 0x0fd7c6d30751dfc3 (8) [eap] = ok (8) } # post-proxy = ok (8) Sent Access-Challenge Id 70 from 192.168.244.230:1812 to 172.23.242.165:1645 length 149 (8) EAP-Message = 0x0186005b19001703010050d842dac4be474e61feb49b428f0dc15cb5b2dea5ae2a1d770b9905700a90190eb47cb97044cfadb837fc0e4cccfa20ac359de5e222fed03aa7a55e7e283d600dbe28cd55d6d9cde6cc552d7a571665b4 (8) Message-Authenticator = 0x00000000000000000000000000000000 (8) State = 0x0fd7c6d30751dfc3c063e5767e205a4d (8) Finished request Waking up in 0.2 seconds. Waking up in 3.3 seconds. (9) Received Access-Request Id 71 from 172.23.242.165:1645 to 192.168.244.230:1812 length 260 (9) User-Name = 'anon1337' (9) Service-Type = Framed-User (9) Framed-IP-Address = 192.168.243.38 (9) Framed-MTU = 1500 (9) Called-Station-Id = '00-00-00-00-AA-AA' (9) Calling-Station-Id = '00-00-00-00-BB-BB' (9) EAP-Message = 0x0286005019001703010020942518f712e6644f26f85fbfe31548d38134a0beeddd00eda1355955a6524eba17030100201e10596c0804a765b2a43e3d627d6c0c87a8d524dd6e100d373d45e0a172046f (9) Message-Authenticator = 0x5cf80e7b5e5a27c09ad086ac15db2aac (9) NAS-Port-Type = Ethernet (9) NAS-Port = 50002 (9) NAS-Port-Id = 'FastEthernet0/2' (9) Called-Station-Id = '00-00-00-00-AA-AA' (9) State = 0x0fd7c6d30751dfc3c063e5767e205a4d (9) NAS-IP-Address = 172.23.242.165 (9) session-state: No cached attributes (9) # Executing section authorize from file /etc/raddb/sites-enabled/default (9) authorize { (9) [preprocess] = ok (9) ntdomain: Checking for prefix before "\" (9) ntdomain: No '\' in User-Name = "anon1337", looking up realm NULL (9) ntdomain: No such realm "NULL" (9) [ntdomain] = noop (9) suffix: Checking for suffix after "@" (9) suffix: No '@' in User-Name = "anon1337", looking up realm NULL (9) suffix: No such realm "NULL" (9) [suffix] = noop (9) eap: Peer sent code Response (2) ID 134 length 80 (9) eap: Continuing tunnel setup (9) [eap] = ok (9) } # authorize = ok (9) Found Auth-Type = EAP (9) # Executing group from file /etc/raddb/sites-enabled/default (9) authenticate { (9) eap: Expiring EAP session with state 0xd3877aa8d2016065 (9) eap: Finished EAP session with state 0x0fd7c6d30751dfc3 (9) eap: Previous EAP request found for state 0x0fd7c6d30751dfc3, released from the list (9) eap: Peer sent method PEAP (25) (9) eap: EAP PEAP (25) (9) eap: Calling eap_peap to process EAP data (9) eap_peap: processing EAP-TLS (9) eap_peap: eaptls_verify returned 7 (9) eap_peap: Done initial handshake (9) eap_peap: eaptls_process returned 7 (9) eap_peap: FR_TLS_OK (9) eap_peap: Session established. Decoding tunneled attributes (9) eap_peap: PEAP state phase2 (9) eap_peap: EAP type MSCHAPv2 (26) (9) eap_peap: Got tunneled request (9) eap_peap: EAP-Message = 0x028600061a03 (9) eap_peap: Setting User-Name to mydomain\user000 (9) eap_peap: Sending tunneled request to inner-tunnel (9) eap_peap: EAP-Message = 0x028600061a03 (9) eap_peap: FreeRADIUS-Proxied-To = 127.0.0.1 (9) eap_peap: User-Name = 'mydomain\user000' (9) eap_peap: State = 0xd3877aa8d20160658703aed2f073d630 (9) eap_peap: Service-Type = Framed-User (9) eap_peap: Framed-IP-Address = 192.168.243.38 (9) eap_peap: Framed-MTU = 1500 (9) eap_peap: Called-Station-Id = '00-00-00-00-AA-AA' (9) eap_peap: Called-Station-Id = '00-00-00-00-AA-AA' (9) eap_peap: Calling-Station-Id = '00-00-00-00-BB-BB' (9) eap_peap: NAS-Port-Type = Ethernet (9) eap_peap: NAS-Port = 50002 (9) eap_peap: NAS-Port-Id = 'FastEthernet0/2' (9) eap_peap: NAS-IP-Address = 172.23.242.165 (9) eap_peap: Event-Timestamp = 'Dec 12 2014 11:27:59 EST' (9) Virtual server received request (9) EAP-Message = 0x028600061a03 (9) FreeRADIUS-Proxied-To = 127.0.0.1 (9) User-Name = 'mydomain\user000' (9) State = 0xd3877aa8d20160658703aed2f073d630 (9) Service-Type = Framed-User (9) Framed-IP-Address = 192.168.243.38 (9) Framed-MTU = 1500 (9) Called-Station-Id = '00-00-00-00-AA-AA' (9) Called-Station-Id = '00-00-00-00-AA-AA' (9) Calling-Station-Id = '00-00-00-00-BB-BB' (9) NAS-Port-Type = Ethernet (9) NAS-Port = 50002 (9) NAS-Port-Id = 'FastEthernet0/2' (9) NAS-IP-Address = 172.23.242.165 (9) Event-Timestamp = 'Dec 12 2014 11:27:59 EST' (9) server inner-tunnel { (9) session-state: No cached attributes (9) # Executing section authorize from file /etc/raddb/sites-enabled/inner-tunnel (9) authorize { (9) ntdomain: Checking for prefix before "\" (9) ntdomain: Looking up realm "mydomain" for User-Name = "mydomain\user000" (9) ntdomain: Found realm "mydomain" (9) ntdomain: Adding Realm = "mydomain" (9) ntdomain: Proxying request from user mydomain\user000 to realm mydomain (9) ntdomain: Preparing to proxy authentication request to realm "mydomain" (9) [ntdomain] = updated (9) suffix: Request already has destination realm set. Ignoring (9) [suffix] = noop (9) eap: Request is supposed to be proxied to Realm mydomain. Not doing EAP. (9) [eap] = noop (9) [expiration] = noop (9) [logintime] = noop (9) [pap] = noop (9) } # authorize = updated (9) } # server inner-tunnel (9) Virtual server sending reply (9) eap_peap: Got tunneled reply code 0 (9) eap_peap: Calling authenticate in order to initiate tunneled EAP session (9) # Executing group from file /etc/raddb/sites-enabled/inner-tunnel (9) authenticate { (9) eap: Expiring EAP session with state 0xd3877aa8d2016065 (9) eap: Finished EAP session with state 0xd3877aa8d2016065 (9) eap: Previous EAP request found for state 0xd3877aa8d2016065, released from the list (9) eap: Peer sent method MSCHAPv2 (26) (9) eap: EAP MSCHAPv2 (26) (9) eap: Calling eap_mschapv2 to process EAP data (9) eap: Freeing handler (9) [eap] = ok (9) } # authenticate = ok (9) eap_peap: Got tunneled reply RADIUS code 2 (9) eap_peap: MS-MPPE-Send-Key = 0xd848d864c43408713a143c15f3c9344c (9) eap_peap: MS-MPPE-Recv-Key = 0x6f6da555aa52c08a69f1d40ab379f27d (9) eap_peap: Proxy-State = 0x3730 (9) eap_peap: Framed-Protocol = PPP (9) eap_peap: Service-Type = Framed-User (9) eap_peap: Class = 0x3e5d044100000137000102000a02016700000000000000000000000001d006be3dc74c 5b0000000000054507 (9) eap_peap: MS-CHAP-Domain = '\205MYDOMAIN' (9) eap_peap: MS-Link-Utilization-Threshold = 50 (9) eap_peap: MS-Link-Drop-Time-Limit = 120 (9) eap_peap: EAP-Message = 0x03860004 (9) eap_peap: Message-Authenticator = 0x00000000000000000000000000000000 (9) eap_peap: User-Name = 'mydomain\user000' (9) eap_peap: Tunneled authentication was successful (9) eap_peap: SUCCESS (9) eap: EAP session adding &reply:State = 0x0fd7c6d30650dfc3 (9) [eap] = handled (9) } # authenticate = handled (9) Sent Access-Challenge Id 71 from 192.168.244.230:1812 to 172.23.242.165:1645 length 101 (9) EAP-Message = 0x0187002b19001703010020b3abef85cebb3db0803d642e026b9f7004abecc69886888bb234 ec4bb9f1dfbf (9) Message-Authenticator = 0x00000000000000000000000000000000 (9) State = 0x0fd7c6d30650dfc3c063e5767e205a4d (9) Finished request Waking up in 0.3 seconds. (10) Received Access-Request Id 72 from 172.23.242.165:1645 to 192.168.244.230:1812 length 260 (10) User-Name = 'anon1337' (10) Service-Type = Framed-User (10) Framed-IP-Address = 192.168.243.38 (10) Framed-MTU = 1500 (10) Called-Station-Id = '00-00-00-00-AA-AA' (10) Calling-Station-Id = '00-00-00-00-BB-BB' (10) EAP-Message = 0x028700501900170301002027b611569c3ac21656ebff7c931c6330b260d9c7685df6afe4d 631e191ef65641703010020277137daef7aa622436b04c068134830a1cf8c671d81b6c743bea4f440ebd25d (10) Message-Authenticator = 0xcae72c0f0b1bf4edc223132d46c7f042 (10) NAS-Port-Type = Ethernet (10) NAS-Port = 50002 (10) NAS-Port-Id = 'FastEthernet0/2' (10) Called-Station-Id = '00-00-00-00-AA-AA' (10) State = 0x0fd7c6d30650dfc3c063e5767e205a4d (10) NAS-IP-Address = 172.23.242.165 (10) session-state: No cached attributes (10) # Executing section authorize from file /etc/raddb/sites-enabled/default (10) authorize { (10) suffix: Checking for suffix after "@" (10) suffix: No '@' in User-Name = "anon1337", looking up realm NULL (10) suffix: No such realm "NULL" (10) [suffix] = noop (10) eap: Peer sent code Response (2) ID 135 length 80 (10) eap: Continuing tunnel setup (10) [eap] = ok (10) } # authorize = ok (10) Found Auth-Type = EAP (10) # Executing group from file /etc/raddb/sites-enabled/default (10) authenticate { (10) eap: Expiring EAP session with state 0x0fd7c6d30650dfc3 (10) eap: Finished EAP session with state 0x0fd7c6d30650dfc3 (10) eap: Previous EAP request found for state 0x0fd7c6d30650dfc3, released from the list (10) eap: Peer sent method PEAP (25) (10) eap: EAP PEAP (25) (10) eap: Calling eap_peap to process EAP data (10) eap_peap: processing EAP-TLS (10) eap_peap: eaptls_verify returned 7 (10) eap_peap: Done initial handshake (10) eap_peap: eaptls_process returned 7 (10) eap_peap: FR_TLS_OK (10) eap_peap: Session established. Decoding tunneled attributes (10) eap_peap: PEAP state send tlv success (10) eap_peap: Received EAP-TLV response (10) eap_peap: Success (10) eap_peap: No information to cache: session caching will be disabled for session 7f3018ef052 364931aa2fc8b559a5cac5f8c7f4d7c81fa96d7848f7fa3ac77b3 SSL: Removing session 7f3018ef052364931aa2fc8b559a5cac5f8c7f4d7c81fa96d7848f7fa3ac77b3 from th e cache (10) eap: Freeing handler (10) [eap] = ok (10) } # authenticate = ok (10) # Executing section post-auth from file /etc/raddb/sites-enabled/default (10) post-auth { (10) update { (10) No attributes updated (10) } # update = noop (10) [exec] = noop (10) policy remove_reply_message_if_eap { (10) if (&reply:EAP-Message && &reply:Reply-Message) { (10) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (10) else { (10) [noop] = noop (10) } # else = noop (10) } # policy remove_reply_message_if_eap = noop (10) } # post-auth = noop (10) Sent Access-Accept Id 72 from 192.168.244.230:1812 to 172.23.242.165:1645 length 170 (10) MS-MPPE-Recv-Key = 0xffe49f5506d33369f1e22b38cd618e47ef03fbc24 (10) MS-MPPE-Send-Key = 0xefc13185a69d26a600f7da511b76ef00c6d5d6ac5 (10) EAP-Message = 0x03870004 (10) Message-Authenticator = 0x00000000000000000000000000000000 (10) User-Name = 'anon1337' (10) Finished request