Hi, the debug output: the differences begin at line 82. Thanks hans 1. without postproxy ############without post-proxy ################### rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=75, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0202001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xd5c382277710afa8317da27237ea09fa +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 137 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0202001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3735 Proxying request 0 to home server 129.217.131.42 port 1812 Sending Access-Request of id 137 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0202001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3735 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=137, length=68 EAP-Message = 0x010300061920 Message-Authenticator = 0x14967f75b5c45d7d7dde72b19e9955ab State = 0x4be46e334be77713b03b4dc635d63d43 Proxy-State = 0x3735 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 75 to 192.168.10.10 port 32768 EAP-Message = 0x010300061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334be77713b03b4dc635d63d43 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=76, length=292 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203005719800000004d16030100480100004403014cdcfe2aa854ea70bfde8d5ce18b3add883979df06a50f0fb82351a592c9265b00001600040005000a0009006400620003000600130012006301000005ff01000100 State = 0x4be46e334be77713b03b4dc635d63d43 Message-Authenticator = 0x7b3dcbe75097797444b75fcbfa2333cb +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 233 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203005719800000004d16030100480100004403014cdcfe2aa854ea70bfde8d5ce18b3add883979df06a50f0fb82351a592c9265b00001600040005000a0009006400620003000600130012006301000005ff01000100 State = 0x4be46e334be77713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3736 Proxying request 1 to home server 129.217.131.42 port 1812 Sending Access-Request of id 233 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203005719800000004d16030100480100004403014cdcfe2aa854ea70bfde8d5ce18b3add883979df06a50f0fb82351a592c9265b00001600040005000a0009006400620003000600130012006301000005ff01000100 State = 0x4be46e334be77713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3736 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=233, length=1094 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x1d11038eab5dc233a604fd12e605dd7cf198b0b50689dbb55d2d671232dc80268570cafe408b54538ad80032969c2f1d4b0e58866fd8fd12abaa09ce08f2abe3aa25eb9291ab318d015b70eb3baf9f7fe9c6b3b3817a2a5983e1d2b3531916b873b29b4027076473956b6b3bc9e1c52577ef22fd619a3e307d3bd56b5a6fda3a5c542f5c11e3ad90d1171e3e3d2b5e4bc76a653c5bcc636efc1dddd963f45bc18b2b75bbea414ba62081d857f39e1d0577246bb21918f2b8e3c5207d9a756c977c5d7caa55fe5576d79dace14af1ea82808cdc0d8412a78ca585f8d4357b989926dd0203010001a38201b5308201b130090603551d1304023000300b06 EAP-Message = 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 EAP-Message = 0x63726c2f636163726c2e6372 Message-Authenticator = 0xdabd25d0ae764250c11dfd38aaaa5d62 State = 0x4be46e334ae07713b03b4dc635d63d43 Proxy-State = 0x3736 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 76 to 192.168.10.10 port 32768 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x03551d0f0404030205e0301d0603551d250416301406082b0601050507030206082b06010505070301301d0603551d0e041604142721f30ecc23ceaabe4c4ac310a25e0272cc02fe301f0603551d23041830168014b6c54c1e86869c1a885135ee146699c133ebc33c30220603551d11041b30198217756e696d61696c2e756e692d646f72746d756e642e6465307b0603551d1f047430723037a035a0338631687474703a2f2f636470312e7063612e64666e2e64652f756e69646f2d63612f7075622f63726c2f636163726c2e63726c3037a035a0338631687474703a2f2f636470322e7063612e64666e2e64652f756e69646f2d63612f7075622f EAP-Message = 0x63726c2f636163726c2e6372 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334ae07713b03b4dc635d63d43 Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=77, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020400061900 State = 0x4be46e334ae07713b03b4dc635d63d43 Message-Authenticator = 0x4b29e92a48e8446c3efd159ef01ba601 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 156 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020400061900 State = 0x4be46e334ae07713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3737 Proxying request 2 to home server 129.217.131.42 port 1812 Sending Access-Request of id 156 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020400061900 State = 0x4be46e334ae07713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3737 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=156, length=1090 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x65696e3110300e060355040b130744464e2d504b49312430220603550403131b44464e2d56657265696e2050434120476c6f62616c202d20473031301e170d3037303133303130313935345a170d3139303132393030303030305a308195310b3009060355040613024445311e301c060355040a1315556e6976657273697461657420446f72746d756e64311f301d060355040b1316486f6368736368756c72656368656e7a656e7472756d311e301c06035504031315556e6920446f72746d756e64204341202d204730313125302306092a864886f70d0109011616636140706b692e756e692d646f72746d756e642e646530820122300d06092a86 EAP-Message = 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 EAP-Message = 0x95861ee4d214a9d9 Message-Authenticator = 0x4bab5b526d2fb801c5e57a6e19dc0233 State = 0x4be46e3349e17713b03b4dc635d63d43 Proxy-State = 0x3737 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 77 to 192.168.10.10 port 32768 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x65696e3110300e060355040b130744464e2d504b49312430220603550403131b44464e2d56657265696e2050434120476c6f62616c202d20473031301e170d3037303133303130313935345a170d3139303132393030303030305a308195310b3009060355040613024445311e301c060355040a1315556e6976657273697461657420446f72746d756e64311f301d060355040b1316486f6368736368756c72656368656e7a656e7472756d311e301c06035504031315556e6920446f72746d756e64204341202d204730313125302306092a864886f70d0109011616636140706b692e756e692d646f72746d756e642e646530820122300d06092a86 EAP-Message = 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 EAP-Message = 0x95861ee4d214a9d9 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3349e17713b03b4dc635d63d43 Finished request 2. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=78, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020500061900 State = 0x4be46e3349e17713b03b4dc635d63d43 Message-Authenticator = 0x5138ebc4d5ceb7d44788f01d5df84cd8 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 16 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020500061900 State = 0x4be46e3349e17713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3738 Proxying request 3 to home server 129.217.131.42 port 1812 Sending Access-Request of id 16 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020500061900 State = 0x4be46e3349e17713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3738 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=16, length=1090 EAP-Message = 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 EAP-Message = 0x703a2f2f636470322e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f63726c2f636163726c2e63726c3081a206082b06010505070101048195308192304706082b06010505073002863b687474703a2f2f636470312e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f6361636572742f6361636572742e637274304706082b06010505073002863b687474703a2f2f636470322e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f6361636572742f6361636572742e637274300d06092a864886f70d0101050500038201010042ea392d1744cdbc8421de52f6e572b2 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x616c202d20473031 Message-Authenticator = 0x768b626c6eb949cb0f30c94b4fbc73d5 State = 0x4be46e3348e27713b03b4dc635d63d43 Proxy-State = 0x3738 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 78 to 192.168.10.10 port 32768 EAP-Message = 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 EAP-Message = 0x703a2f2f636470322e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f63726c2f636163726c2e63726c3081a206082b06010505070101048195308192304706082b06010505073002863b687474703a2f2f636470312e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f6361636572742f6361636572742e637274304706082b06010505073002863b687474703a2f2f636470322e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f6361636572742f6361636572742e637274300d06092a864886f70d0101050500038201010042ea392d1744cdbc8421de52f6e572b2 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x616c202d20473031 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3348e27713b03b4dc635d63d43 Finished request 3. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=79, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020600061900 State = 0x4be46e3348e27713b03b4dc635d63d43 Message-Authenticator = 0x4f0971b8b8d2a7964a598511defc6c65 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 101 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020600061900 State = 0x4be46e3348e27713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3739 Proxying request 4 to home server 129.217.131.42 port 1812 Sending Access-Request of id 101 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020600061900 State = 0x4be46e3348e27713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3739 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=101, length=1090 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x54656c656b6f6d20 Message-Authenticator = 0x5aaa90da71bf3a69fda02e737069c522 State = 0x4be46e334fe37713b03b4dc635d63d43 Proxy-State = 0x3739 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 79 to 192.168.10.10 port 32768 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x54656c656b6f6d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334fe37713b03b4dc635d63d43 Finished request 4. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=80, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020700061900 State = 0x4be46e334fe37713b03b4dc635d63d43 Message-Authenticator = 0xf867011aac610e0125c71e1023526847 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 176 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020700061900 State = 0x4be46e334fe37713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3830 Proxying request 5 to home server 129.217.131.42 port 1812 Sending Access-Request of id 176 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020700061900 State = 0x4be46e334fe37713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3830 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=176, length=791 EAP-Message = 0x010802d519004147311f301d060355040b1316542d54656c655365632054727573742043656e746572312330210603550403131a44657574736368652054656c656b6f6d20526f6f74204341203230820122300d06092a864886f70d01010105000382010f003082010a0282010100ab0ba335e08b2914b11485af3c10e4396f355d4aaeddea618d9549f46f64a31a6066a4a9402284d9d4a5e578930e6801adb94d5c3aced3b8a84240dfcfa3ba82596a921bac1c9ada082b2527f9692347f1e0eb2c7a9bf51302d07e347cc29e3c0059abf5da0cf5323c2bac50dad6c3de8394caa80c99320e0848565b6afbdae1585801495f72413c1506018e5dad EAP-Message = 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 EAP-Message = 0x987ab13b54eb3917477e1a8e0bfc1f31593104b2ce17f32cc7623655e222d88955b49848aa64fad61c36d844785a5a233a5797f57a304fae9f6a4c4b2b8ea003e33ee0a9d4d27bd2b3a8e2723cad9eff8059e49b45b4f63bb0cd39199832e5ea216190e431218e34b1f72f354a8510dae78a3721be5963e0f285883153d45414857079f42e067727752f1fb88af9fec5bad836e483ece765b7bf635af346af819437d4418cd623d61ecff5681b4463a25abaa73559a1e570059b0e235799940a6dba3963288692f31884d8fbd1cf0556645716030100040e000000 Message-Authenticator = 0x39529adfab9d34b785634e20e3433435 State = 0x4be46e334eec7713b03b4dc635d63d43 Proxy-State = 0x3830 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 80 to 192.168.10.10 port 32768 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x987ab13b54eb3917477e1a8e0bfc1f31593104b2ce17f32cc7623655e222d88955b49848aa64fad61c36d844785a5a233a5797f57a304fae9f6a4c4b2b8ea003e33ee0a9d4d27bd2b3a8e2723cad9eff8059e49b45b4f63bb0cd39199832e5ea216190e431218e34b1f72f354a8510dae78a3721be5963e0f285883153d45414857079f42e067727752f1fb88af9fec5bad836e483ece765b7bf635af346af819437d4418cd623d61ecff5681b4463a25abaa73559a1e570059b0e235799940a6dba3963288692f31884d8fbd1cf0556645716030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334eec7713b03b4dc635d63d43 Finished request 5. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=81, length=527 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020801401980000001361603010106100001020100019d360f4941b8770c18698fb107abe5914e6ac5e368dded8a54d641d4c176ce15630b09c6c5853d5aae7b9ebfab06d126927696c4afd28354e88e9553ad0e263f97577f137e64b772d988f7a742510bab509c05fe8d92e1a8ef5a5852fbe8d5e3d27d082fa74a01f64d1eb95a9a9b3bea9e0e3cced10c835e445ce3d4469d25bb2973d54e5040f26070a857526e9c9a4673d7283abffc544d1c319794ef92d36e34a97501cd7deeb3b3b603cd2684c4c5ded374515a953828247f3521268db92bc0edfa8f52960c86f907c262b30ce7feb1d7b141d8e9dd9e3a32037f040d06dcb30614bada8c6b EAP-Message = 0xbd9db73112696068cc65059202668b6cc293a4c85231194c1403010001011603010020bc4a477eec0ce505456dd296aa2cd5434e2222f22ba4af18aa4808db33555972 State = 0x4be46e334eec7713b03b4dc635d63d43 Message-Authenticator = 0x249f3aee701ea70237910d6b197144b3 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 232 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 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 EAP-Message = 0xbd9db73112696068cc65059202668b6cc293a4c85231194c1403010001011603010020bc4a477eec0ce505456dd296aa2cd5434e2222f22ba4af18aa4808db33555972 State = 0x4be46e334eec7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3831 Proxying request 6 to home server 129.217.131.42 port 1812 Sending Access-Request of id 232 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020801401980000001361603010106100001020100019d360f4941b8770c18698fb107abe5914e6ac5e368dded8a54d641d4c176ce15630b09c6c5853d5aae7b9ebfab06d126927696c4afd28354e88e9553ad0e263f97577f137e64b772d988f7a742510bab509c05fe8d92e1a8ef5a5852fbe8d5e3d27d082fa74a01f64d1eb95a9a9b3bea9e0e3cced10c835e445ce3d4469d25bb2973d54e5040f26070a857526e9c9a4673d7283abffc544d1c319794ef92d36e34a97501cd7deeb3b3b603cd2684c4c5ded374515a953828247f3521268db92bc0edfa8f52960c86f907c262b30ce7feb1d7b141d8e9dd9e3a32037f040d06dcb30614bada8c6b EAP-Message = 0xbd9db73112696068cc65059202668b6cc293a4c85231194c1403010001011603010020bc4a477eec0ce505456dd296aa2cd5434e2222f22ba4af18aa4808db33555972 State = 0x4be46e334eec7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3831 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=232, length=111 EAP-Message = 0x0109003119001403010001011603010020a30eaf6dbab8adfec84d629581223822b444a1b6f541a5c35e2341aed8c33845 Message-Authenticator = 0x2b8fb3a8efa22a30fd23c351ed8108c2 State = 0x4be46e334ded7713b03b4dc635d63d43 Proxy-State = 0x3831 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 81 to 192.168.10.10 port 32768 EAP-Message = 0x0109003119001403010001011603010020a30eaf6dbab8adfec84d629581223822b444a1b6f541a5c35e2341aed8c33845 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334ded7713b03b4dc635d63d43 Finished request 6. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=82, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020900061900 State = 0x4be46e334ded7713b03b4dc635d63d43 Message-Authenticator = 0xd30055acf6440f25eb19636d02eb0048 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 166 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020900061900 State = 0x4be46e334ded7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3832 Proxying request 7 to home server 129.217.131.42 port 1812 Sending Access-Request of id 166 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020900061900 State = 0x4be46e334ded7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3832 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=166, length=94 EAP-Message = 0x010a00201900170301001566e16e2aaa53d594db6c36a28a90b77e2e9bba9b5e Message-Authenticator = 0x8f738e3e610d79dc29fd66a5e5564995 State = 0x4be46e334cee7713b03b4dc635d63d43 Proxy-State = 0x3832 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 82 to 192.168.10.10 port 32768 EAP-Message = 0x010a00201900170301001566e16e2aaa53d594db6c36a28a90b77e2e9bba9b5e Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334cee7713b03b4dc635d63d43 Finished request 7. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=83, length=256 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020a0033190017030100285bd3713441fa7b64ed389f4d6050b81c745fafe0c2b6103d414e5cdcd2c70d872428cd24bf9e7289 State = 0x4be46e334cee7713b03b4dc635d63d43 Message-Authenticator = 0x25a8b28e31c980eef12fdd86badc4bed +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 140 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020a0033190017030100285bd3713441fa7b64ed389f4d6050b81c745fafe0c2b6103d414e5cdcd2c70d872428cd24bf9e7289 State = 0x4be46e334cee7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3833 Proxying request 8 to home server 129.217.131.42 port 1812 Sending Access-Request of id 140 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020a0033190017030100285bd3713441fa7b64ed389f4d6050b81c745fafe0c2b6103d414e5cdcd2c70d872428cd24bf9e7289 State = 0x4be46e334cee7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3833 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=140, length=134 EAP-Message = 0x010b00481900170301003dccf156b11ac25773854d021f8008bf2fa0306a91a6a039ea3ef7195cdc00b9dcc1f40db9f3e026f78f6777e42c0d9228f8bb7b6851a615580cfff2d38d Message-Authenticator = 0x91c0caee42edc6259a606c56a045f54d State = 0x4be46e3343ef7713b03b4dc635d63d43 Proxy-State = 0x3833 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 83 to 192.168.10.10 port 32768 EAP-Message = 0x010b00481900170301003dccf156b11ac25773854d021f8008bf2fa0306a91a6a039ea3ef7195cdc00b9dcc1f40db9f3e026f78f6777e42c0d9228f8bb7b6851a615580cfff2d38d Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3343ef7713b03b4dc635d63d43 Finished request 8. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=84, length=310 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020b00691900170301005e3697c3208260750cb1dc678130e848f4fd28ba4f2194687b7bc93baa210f986840c9b36cfa859cf6a4c542ae662a4169bc88008b8259031fb017bfc6dac986766fb4fe11a71bcb88003a91fcd8d77107de9acfc74e20343afd3b0661be92 State = 0x4be46e3343ef7713b03b4dc635d63d43 Message-Authenticator = 0x1ced27069a3ffd58bf719be3eba42060 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 143 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020b00691900170301005e3697c3208260750cb1dc678130e848f4fd28ba4f2194687b7bc93baa210f986840c9b36cfa859cf6a4c542ae662a4169bc88008b8259031fb017bfc6dac986766fb4fe11a71bcb88003a91fcd8d77107de9acfc74e20343afd3b0661be92 State = 0x4be46e3343ef7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3834 Proxying request 9 to home server 129.217.131.42 port 1812 Sending Access-Request of id 143 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020b00691900170301005e3697c3208260750cb1dc678130e848f4fd28ba4f2194687b7bc93baa210f986840c9b36cfa859cf6a4c542ae662a4169bc88008b8259031fb017bfc6dac986766fb4fe11a71bcb88003a91fcd8d77107de9acfc74e20343afd3b0661be92 State = 0x4be46e3343ef7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3834 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=143, length=136 EAP-Message = 0x010c004a1900170301003f78d832a5b4a5bdb8707a2a3b36498bcfa613f90608f1edac8e18ef2c10d13eca7b6f5d2b748a0ddd3be23a6e3af49a012d75c5ab61509b5be297847312466a Message-Authenticator = 0x8e7d0858d12eaa640eca6fbcb26c3d50 State = 0x4be46e3342e87713b03b4dc635d63d43 Proxy-State = 0x3834 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 84 to 192.168.10.10 port 32768 EAP-Message = 0x010c004a1900170301003f78d832a5b4a5bdb8707a2a3b36498bcfa613f90608f1edac8e18ef2c10d13eca7b6f5d2b748a0ddd3be23a6e3af49a012d75c5ab61509b5be297847312466a Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3342e87713b03b4dc635d63d43 Finished request 9. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=85, length=234 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020c001d19001703010012fea63192e80c2cbdace239c25b208955b0c6 State = 0x4be46e3342e87713b03b4dc635d63d43 Message-Authenticator = 0xc99b70ce4fa5aba818706dfac4a558ce +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 194 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020c001d19001703010012fea63192e80c2cbdace239c25b208955b0c6 State = 0x4be46e3342e87713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3835 Proxying request 10 to home server 129.217.131.42 port 1812 Sending Access-Request of id 194 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020c001d19001703010012fea63192e80c2cbdace239c25b208955b0c6 State = 0x4be46e3342e87713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3835 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=194, length=100 EAP-Message = 0x010d00261900170301001b1ddcd0159af1dc534c48c3355cbb635837708aa7861a593f213787 Message-Authenticator = 0xcf057afde6a540c83c26b8bfe8efbd26 State = 0x4be46e3341e97713b03b4dc635d63d43 Proxy-State = 0x3835 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 85 to 192.168.10.10 port 32768 EAP-Message = 0x010d00261900170301001b1ddcd0159af1dc534c48c3355cbb635837708aa7861a593f213787 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3341e97713b03b4dc635d63d43 Finished request 10. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=86, length=243 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020d00261900170301001b0d107c58e7ef0b508aeffc40ce389786f302b0fa62f5297d5c99ca State = 0x4be46e3341e97713b03b4dc635d63d43 Message-Authenticator = 0x92bf72d69329d3e1c3abe7e6f7abbb61 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 168 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020d00261900170301001b0d107c58e7ef0b508aeffc40ce389786f302b0fa62f5297d5c99ca State = 0x4be46e3341e97713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3836 Proxying request 11 to home server 129.217.131.42 port 1812 Sending Access-Request of id 168 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020d00261900170301001b0d107c58e7ef0b508aeffc40ce389786f302b0fa62f5297d5c99ca State = 0x4be46e3341e97713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3836 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 129.217.131.42 port 1812, id=168, length=174 User-Name = "testuser" MS-MPPE-Recv-Key = 0xd7a0bda569bd29d6ebf061f901305bd1f89d15a54f215a6d7ca5cea5358b856f MS-MPPE-Send-Key = 0x7697abbfe601343402ab68a59e10d7cab4c6924f13259464221fe156a727f6cc EAP-Message = 0x030d0004 Message-Authenticator = 0x99443c67c58187566341d5d3f87dd07c Proxy-State = 0x3836 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Found Auth-Type = Accept Auth-Type = Accept, accepting the user +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 86 to 192.168.10.10 port 32768 User-Name = "testuser" MS-MPPE-Recv-Key = 0xd7a0bda569bd29d6ebf061f901305bd1f89d15a54f215a6d7ca5cea5358b856f MS-MPPE-Send-Key = 0x7697abbfe601343402ab68a59e10d7cab4c6924f13259464221fe156a727f6cc EAP-Message = 0x030d0004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 11. Going to the next request Waking up in 4.6 seconds. Cleaning up request 0 ID 75 with timestamp +533 Cleaning up request 1 ID 76 with timestamp +533 Cleaning up request 2 ID 77 with timestamp +533 Cleaning up request 3 ID 78 with timestamp +533 Cleaning up request 4 ID 79 with timestamp +533 Cleaning up request 5 ID 80 with timestamp +533 Cleaning up request 6 ID 81 with timestamp +533 Waking up in 0.1 seconds. Cleaning up request 7 ID 82 with timestamp +533 Cleaning up request 8 ID 83 with timestamp +533 Cleaning up request 9 ID 84 with timestamp +533 Cleaning up request 10 ID 85 with timestamp +533 Cleaning up request 11 ID 86 with timestamp +533 Ready to process requests. ########### ohne post-proxy ######################### 2. with postproxy: ############### with post-proxy ######################### rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=87, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xa90106b2c429dc02a730820cb9acde5a +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 64 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3837 Proxying request 0 to home server 129.217.131.42 port 1812 Sending Access-Request of id 64 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3837 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=64, length=68 EAP-Message = 0x010200061920 Message-Authenticator = 0x91718e38c63c36cfaf6e46c2936ee084 State = 0xd345de34d347c7b9267b650ec61ffd20 Proxy-State = 0x3837 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:45:39 2010 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> tu-dortmund.de attr_filter: Matched entry tu-dortmund.de at line 103 attr_filter: Matched entry DEFAULT at line 110 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 87 to 192.168.10.10 port 32768 Tunnel-Private-Group-Id:0 := "3503" Tunnel-Type:0 := VLAN Tunnel-Medium-Type:0 := IEEE-802 Finished request 0. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 87 with timestamp +49 Ready to process requests. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=88, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xd096e99454f1f33b867a9a0a0abe86e5 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 120 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3838 Proxying request 1 to home server 129.217.131.42 port 1812 Sending Access-Request of id 120 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3838 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=120, length=68 EAP-Message = 0x010400061920 Message-Authenticator = 0x6f3cd5b0b7ab270472f494af7fd081f5 State = 0x55b7adb855b3b45f62385e77c8c4ba50 Proxy-State = 0x3838 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:46:09 2010 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> tu-dortmund.de attr_filter: Matched entry tu-dortmund.de at line 103 attr_filter: Matched entry DEFAULT at line 110 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 88 to 192.168.10.10 port 32768 Tunnel-Private-Group-Id:0 := "3503" Tunnel-Type:0 := VLAN Tunnel-Medium-Type:0 := IEEE-802 Finished request 1. Going to the next request Waking up in 4.9 seconds. Cleaning up request 1 ID 88 with timestamp +79 Ready to process requests. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=89, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xd9923d4ce88e9564f9d214bbc2a71704 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 8 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3839 Proxying request 2 to home server 129.217.131.42 port 1812 Sending Access-Request of id 8 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3839 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=8, length=68 EAP-Message = 0x010200061920 Message-Authenticator = 0xec57e9bffd69960dcbbf0831e82f355f State = 0x69c1f83a69c3e1a59ee4e9a8aa25d567 Proxy-State = 0x3839 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:46:39 2010 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> tu-dortmund.de attr_filter: Matched entry tu-dortmund.de at line 103 attr_filter: Matched entry DEFAULT at line 110 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 89 to 192.168.10.10 port 32768 Tunnel-Private-Group-Id:0 := "3503" Tunnel-Type:0 := VLAN Tunnel-Medium-Type:0 := IEEE-802 Finished request 2. Going to the next request Waking up in 4.9 seconds. Cleaning up request 2 ID 89 with timestamp +109 Ready to process requests. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=90, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xbb2175ea24ba594c7709d3eef6f3a978 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 123 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3930 Proxying request 3 to home server 129.217.131.42 port 1812 Sending Access-Request of id 123 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3930 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=123, length=68 EAP-Message = 0x010400061920 Message-Authenticator = 0x88d99196dda6c84d2d7b15bdcb15bb27 State = 0xe52019c2e5240004b1028ce4230a6211 Proxy-State = 0x3930 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:47:09 2010 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> tu-dortmund.de attr_filter: Matched entry tu-dortmund.de at line 103 attr_filter: Matched entry DEFAULT at line 110 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 90 to 192.168.10.10 port 32768 Tunnel-Private-Group-Id:0 := "3503" Tunnel-Type:0 := VLAN Tunnel-Medium-Type:0 := IEEE-802 Finished request 3. Going to the next request -- Hans Bornemann IT & Medien Centrum - TU Dortmund Tel. 0049 231 7552132 -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+hans.bornemann=tu-dortmund.de@lists.freeradius.org [mailto:freeradius-users-bounces+hans.bornemann=tu-dortmund.de@lists.freeradius.org] Im Auftrag von Phil Mayers Gesendet: Mittwoch, 17. November 2010 14:23 An: freeradius-users@lists.freeradius.org Betreff: Re: postproxy breaks eap authentication On 17/11/10 12:31, hans.bornemann@tu-dortmund.de wrote:
Hi,
I have 2 freeradius server: 1 as proxy server, 1 as authentication server. Everything is working fine (Auth. for WPA2, MSCHAPv2 ) until I implement the postproxy function:
Post the debugging output, as advised frequently on this list: radiusd -X | tee log
post-proxy {
post_proxy_log
#attr_rewrite
attr_filter.post-proxy
You're probably filtering the EAP-Message and other required attributes out
/etc/freeradius/attrs:
tu-dortmund.de Tunnel-Private-Group-ID :=8, Fall-Through = Yes
DEFAULT Tunnel-Type := VLAN, Tunnel-Medium-Type := IEEE-802
This filter is insufficient. Please study the examples - you need at least: Reply-Message =* ANY, Proxy-State =* ANY, EAP-Message =* ANY, Message-Authenticator =* ANY, MS-MPPE-Recv-Key =* ANY, MS-MPPE-Send-Key =* ANY, MS-CHAP-MPPE-Keys =* ANY, State =* ANY ...to be sure of EAP working. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html